| Package | Affected versions | Patched versions |
|---|---|---|
| apache2 | ≤ 2.2.16-6≤ 2.2.22-12 |
The Debian apache2ctl script in the apache2 package squeeze before 2.2.16-6+squeeze11, wheezy before 2.2.22-13, and sid before 2.2.22-13 for the Apache HTTP Server on Debian GNU/Linux does not properly create the /var/lock/apache2 lock directory, which allows local users to gain privileges via an unspecified symlink attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free