Apache基金會修補網頁伺服器HTTP Server的原始碼洩露弱點
支付動態 · 2024-07-11
7月初Apache基金會針對網頁伺服器系統HTTP Server發布更新，當中修補高風險層級漏洞CVE-2024-39884，若不處理，網頁伺服器就有可以面臨原始碼洩露的風險
上週Apache基金會發布2.4.61版網頁伺服器系統HTTP Server，主要是修補一項漏洞CVE-2024-39884，這項漏洞帶來的影響，是在handlers組態透過AddType設置時，有可能導致原始碼資訊洩漏的情況，在2.4.60版以前的HTTP Server都可能會曝險。
這項漏洞發生的原因，在於此網頁伺服器系統核心有個遞迴（regression）處理流程中，會忽略採用的部分舊版內容類型（content-type）。在AddType或類似的組態環境裡，某些間接請求檔案的情況，就有可能導致本機原始碼洩露的情況。
關於這項漏洞的嚴重程度，Apache基金會先將其列為高風險（Important）層級，但目前尚未公布CVSS風險評分。
熱門文章
Global Game Connect (GGC) 2027 Officially Opens Sponsorship & Exhibition Opportunities in Sri Lanka!
HUIDU Focus
Institutional Academy that exceeded expectations marked the opening of GAT CDMX
Online Game
Gaming & Technology Expo Makes a Powerful Entrance in CDMX
Marketing
Are you ready to maximize your earnings? Try ProPush.me Constructor!
Marketing
1spin4win grows its Latin American presence by partnering with Fortuna Juegos
Online Game
Super PAC Raises $48 Million: Sports Betting Forces Ramp Up Political Push
Regulation
Vietnam's tightening online gaming policy creates new market opportunities
Southeast Asia
Online gambling, crypto pose ongoing money laundering risks in Philippines, analyst says
Southeast Asia
That’s a Wrap: AffPapa Conference Madrid 2026 Highlights
Online Game
Vietnam’s Controlled Gaming Shift Gains Ground, But Domestic Demand Still Lags
Southeast Asia
What’s on the SBC Summit Conference Agenda in 2026?
Marketing
Brazil Proposes Raising Gambling Tax Rate to 24%, With Revenue Allocated to Social Security and Healthcare
Regulation
JILI Partners with Cricket Legend AB de Villiers (ABD) to Launch Exclusive Branded Game Series 100% 11
Sports Game
PropellerAds Shared a New iGaming Case Study: 97,674 Installs and 12,701 Deposits in 3 Months
Marketing
PropellerAds Positions Itself as a Go-To Traffic Source for iGaming Advertisers Ahead of a High-Demand Season
Marketing
