Total vulnerabilities in the database
The Apache HTTP Server 2.2.11 and earlier 2.2 versions does not properly handle Options=IncludesNOEXEC in the AllowOverride directive, which allows local users to gain privileges by configuring (1) Options Includes, (2) Options +Includes, or (3) Options +IncludesNOEXEC in a .htaccess file, and then inserting an exec element in a .shtml file.
| Software | From | Fixed in |
|---|---|---|
| apache / http_server | 2.2.0 | 2.2.0.x |
| apache / http_server | 2.2.10 | 2.2.10.x |
| apache / http_server | 2.2.2 | 2.2.2.x |
| apache / http_server | 2.2.4 | 2.2.4.x |
| apache / http_server | 2.2.8 | 2.2.8.x |
| apache / http_server | 2.2.7 | 2.2.7.x |
| apache / http_server | 2.2.9 | 2.2.9.x |
| apache / http_server | 2.2.3 | 2.2.3.x |
| apache / http_server | 2.2.1 | 2.2.1.x |