ID:6082 - Exploit for Privilege escalation in Apache HTTP Server - CVE-2019-0211

 
Main Vulnerability Database Exploits ID:6082 - Exploit for Privilege escalation in Apache HTTP Server - CVE-2019-0211

ID:6082 - Exploit for Privilege escalation in Apache HTTP Server - CVE-2019-0211

Published: June 17, 2021


Vulnerability identifier: #VU18110
Vulnerability risk: Low
CVE-ID: CVE-2019-0211
CWE-ID: CWE-264
Exploitation vector: Local access
Vulnerable software:
Apache HTTP Server

Link to public exploit:


Vulnerability description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists within MPM implementation due to the application does not properly maintain each child's listener bucket number in the scoreboard that may lead to unprivileged code or scripts run by server (e.g. via mod_php) to modify the scoreboard and abuse the privileged main process.

A local user can execute arbitrary code on the system with privileges of the Apache HTTP Server code process.


Remediation

Install updates from vendor's website.