Apache Mixed Platform AddType Directive Information Disclosure (CVE-2007-6514)
Publish Date: 21 de июля de 2015
Severity: : Medium
Advisory Date: 21 de июля de 2015
DESCRIPTION
Apache HTTP Server, when running on Linux with a document root on a Windows share mounted using smbfs, allows remote attackers to obtain unprocessed content such as source files for .php programs via a trailing "\" (backslash), which is not handled by the intended AddType directive.
INFORMATION EXPOSURE
Apply associated Trend Micro DPI Rules.
SOLUTION
Trend Micro Deep Security DPI Rule Number: 1005625