CVE-2009-1195

Source
https://nvd.nist.gov/vuln/detail/CVE-2009-1195
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2009-1195.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2009-1195
Downstream
Related
Published
2009-05-28T20:30:00Z
Modified
2025-08-09T19:01:26Z
Summary
[none]
Details

The Apache HTTP Server 2.2.11 and earlier 2.2 versions does not properly handle Options=IncludesNOEXEC in the AllowOverride directive, which allows local users to gain privileges by configuring (1) Options Includes, (2) Options +Includes, or (3) Options +IncludesNOEXEC in a .htaccess file, and then inserting an exec element in a .shtml file.

References

Affected packages