Apache HTTP Server目录遍历和远程代码执行漏洞

详细信息

漏洞类型

其他

漏洞描述

发现Apache HTTP服务器2.4.50中CVE-2021-41773的修复程序不足。攻击者可以使用路径遍历攻击将URL映射到由类别名指令配置的目录之外的文件。如果这些目录之外的文件不受通常默认配置require all denied的保护，则这些请求可以成功。如果还为这些别名路径启用了CGI脚本，则可能允许远程代码执行。此问题只影响Apache 2.4.49和Apache 2.4.50，而不影响早期版本。

修复建议

升级服务器版本到Apache HTTP Server 2.4.51： https://httpd.apache.org/download.cgi#apache24

参考链接

• http://jvn.jp/en/jp/JVN51106450/index.html

  NVD · Third Party Advisory

• http://www.openwall.com/lists/oss-security/2021/10/07/6

  NVD · Mailing List · Third Party Advisory

• https://httpd.apache.org/security/vulnerabilities_24.html

  NVD · Release Notes · Vendor Advisory

• https://lists.apache.org/thread.html/r7c795cd45a3384d4d27e57618a215b0ed19cb6ca8eb070061ad5d837@%3Cannounce.apache.org%3E
• https://lists.apache.org/thread.html/rb5b0e46f179f60b0c70204656bc52fcb558e961cb4d06a971e9e3efb@%3Cusers.httpd.apache.org%3E
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-httpd-pathtrv-LAzg68cZ

  OSV · vendor-advisory · x_refsource_CISCO

• http://packetstormsecurity.com/files/164941/Apache-HTTP-Server-2.4.50-Remote-Code-Execution.html

  OSV · x_refsource_MISC

• http://www.openwall.com/lists/oss-security/2021/10/07/6

  OSV · mailing-list · x_refsource_MLIST

• http://packetstormsecurity.com/files/164501/Apache-HTTP-Server-2.4.50-Path-Traversal-Code-Execution.html

  OSV · x_refsource_MISC

• https://security.gentoo.org/glsa/202208-20

  OSV · vendor-advisory · x_refsource_GENTOO

• http://jvn.jp/en/jp/JVN51106450/index.html

  OSV · third-party-advisory · x_refsource_JVN

• http://www.openwall.com/lists/oss-security/2021/10/08/3

  OSV · mailing-list · x_refsource_MLIST

• https://www.oracle.com/security-alerts/cpuapr2022.html

  OSV · x_refsource_MISC

• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WS5RVHOIIRECG65ZBTZY7IEJVWQSQPG3/

  OSV · vendor-advisory · x_refsource_FEDORA

• http://packetstormsecurity.com/files/165089/Apache-HTTP-Server-2.4.50-CVE-2021-42013-Exploitation.html

  OSV · x_refsource_MISC

• https://www.oracle.com/security-alerts/cpujan2022.html

  OSV · x_refsource_MISC

• http://www.openwall.com/lists/oss-security/2021/10/08/2

  OSV · mailing-list · x_refsource_MLIST

• https://www.povilaika.com/apache-2-4-50-exploit/

  OSV · x_refsource_MISC

• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RMIIEFINL6FUIOPD2A3M5XC6DH45Y3CC/

  OSV · vendor-advisory · x_refsource_FEDORA

• http://www.openwall.com/lists/oss-security/2021/10/08/1

  OSV · mailing-list · x_refsource_MLIST

• http://packetstormsecurity.com/files/164609/Apache-HTTP-Server-2.4.50-Remote-Code-Execution.html

  OSV · x_refsource_MISC

• http://packetstormsecurity.com/files/164629/Apache-2.4.49-2.4.50-Traversal-Remote-Code-Execution.html

  OSV · x_refsource_MISC

• http://www.openwall.com/lists/oss-security/2021/10/11/4

  OSV · mailing-list · x_refsource_MLIST

• https://httpd.apache.org/security/vulnerabilities_24.html

  OSV · x_refsource_MISC

• http://www.openwall.com/lists/oss-security/2021/10/09/1

  OSV · mailing-list · x_refsource_MLIST

• http://www.openwall.com/lists/oss-security/2021/10/15/3

  OSV · mailing-list · x_refsource_MLIST

• https://lists.apache.org/thread.html/r17a4c6ce9aff662efd9459e9d1850ab4a611cb23392fc68264c72cb3%40%3Ccvs.httpd.apache.org%3E

  OSV · mailing-list · x_refsource_MLIST

• http://www.openwall.com/lists/oss-security/2021/10/16/1

  OSV · mailing-list · x_refsource_MLIST

• https://lists.apache.org/thread.html/r7c795cd45a3384d4d27e57618a215b0ed19cb6ca8eb070061ad5d837%40%3Cannounce.apache.org%3E

  OSV · mailing-list · x_refsource_MLIST

• http://www.openwall.com/lists/oss-security/2021/10/08/6

  OSV · mailing-list · x_refsource_MLIST

• https://security.netapp.com/advisory/ntap-20211029-0009/

  OSV · x_refsource_CONFIRM

• http://www.openwall.com/lists/oss-security/2021/10/08/5

  OSV · mailing-list · x_refsource_MLIST

• http://packetstormsecurity.com/files/167397/Apache-2.4.50-Remote-Code-Execution.html

  OSV · x_refsource_MISC

• https://lists.apache.org/thread.html/rb5b0e46f179f60b0c70204656bc52fcb558e961cb4d06a971e9e3efb%40%3Cusers.httpd.apache.org%3E

  OSV · mailing-list · x_refsource_MLIST

• http://www.openwall.com/lists/oss-security/2021/10/08/4

  OSV · mailing-list · x_refsource_MLIST

• https://osv.dev/vulnerability/BIT-apache-2021-42013

  OSV

• https://osv.dev/vulnerability/CVE-2021-42013

  OSV

• https://security.alpinelinux.org/vuln/CVE-2021-42013

  OSV

• https://security-tracker.debian.org/tracker/CVE-2021-42013

  OSV

• https://nvd.nist.gov/vuln/detail/CVE-2021-42013

  OSV

• https://osv.dev/vulnerability/DEBIAN-CVE-2021-42013

  OSV

• https://osv.dev/vulnerability/ALPINE-CVE-2021-42013

  OSV

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-42013

  NVD · US Government Resource