Apache Mixed Platform AddType Directive Information Disclosure (CVE-2007-6514)
Publish Date: 21 juillet 2015
Gravité: : Medium
Date du conseil: 21 juillet 2015
Description
Apache HTTP Server, when running on Linux with a document root on a Windows share mounted using smbfs, allows remote attackers to obtain unprocessed content such as source files for .php programs via a trailing "\" (backslash), which is not handled by the intended AddType directive.
Information Exposure Rating:
Apply associated Trend Micro DPI Rules.
Solutions
Trend Micro Deep Security DPI Rule Number: 1005625