CVE-2009-1195

Source
https://nvd.nist.gov/vuln/detail/CVE-2009-1195
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2009-1195.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2009-1195
Downstream
Related
Published
2009-05-28T20:30:00Z
Modified
2025-08-09T20:01:28Z
Summary
[none]
Details

The Apache HTTP Server 2.2.11 and earlier 2.2 versions does not properly handle Options=IncludesNOEXEC in the AllowOverride directive, which allows local users to gain privileges by configuring (1) Options Includes, (2) Options +Includes, or (3) Options +IncludesNOEXEC in a .htaccess file, and then inserting an exec element in a .shtml file.

References

Affected packages