cve/2009/CVE-2009-1191.md

CVE-2009-1191

Description

mod_proxy_ajp.c in the mod_proxy_ajp module in the Apache HTTP Server 2.2.11 allows remote attackers to obtain sensitive response data, intended for a client that sent an earlier POST request with no request body, via an HTTP request.

POC

Reference

• http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html
• http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html

Github

• https://github.com/Live-Hack-CVE/CVE-2009-1191