I am running Easyphp 1.8 on WinXP with phpnuke 6.5.
Easyphp comes with Apache/1.3.33 (Win32) PHP/4.4.6.
Whenever my security team people running vulnerability scanning, they detected the mod_rewrite Vulnerability on the system.
I have tried disable the mod_rewrite, but still there when scan.
I don't know much about mod_rewrite, what can i do to fix the vulnerability? From apache or from phpnuke code?
Vulnerability detected:
Apache HTTP Server mod_rewrite Vulnerability
Apache is a popular, open source web server application.A vulnerability is present in Apache that may allow remote code execution or a denial of service attack. The flaws reside in the mod_rewrite module through 1) allowing control of a portion of a rewritten URL and 2) no flag control is available such as Forbidden, Gone or NoEscape. The default installation of Apache is not vulnerable as it does not include use of this rewrite module.
ipenang Nuke Cadet
Joined: Sep 12, 2003
Posts: 2
Posted:
Tue Oct 09, 2007 6:50 pm
I have remark these in my httpd.conf, but vulnerability can't go away
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
