| Package | Affected versions | Patched versions |
|---|---|---|
| http server | ≥ 2.0.0, < 2.0.65≥ 2.2.0, < 2.2.25 | 2.0.652.2.25 |
| http server | = 10.1.3.5.0= 11.1.1.7.0= 12.1.2.0= 12.1.3.0 | |
| jboss enterprise application platform | = 6.0.0= 6.4.0 |
mod_rewrite.c in the mod_rewrite module in the Apache HTTP Server 2.2.x before 2.2.25 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to execute arbitrary commands via an HTTP request containing an escape sequence for a terminal emulator.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free