Apache基金會修補網頁伺服器HTTP Server的原始碼洩露弱點
支付動態 · 2024-07-11
7月初Apache基金會針對網頁伺服器系統HTTP Server發布更新，當中修補高風險層級漏洞CVE-2024-39884，若不處理，網頁伺服器就有可以面臨原始碼洩露的風險
上週Apache基金會發布2.4.61版網頁伺服器系統HTTP Server，主要是修補一項漏洞CVE-2024-39884，這項漏洞帶來的影響，是在handlers組態透過AddType設置時，有可能導致原始碼資訊洩漏的情況，在2.4.60版以前的HTTP Server都可能會曝險。
這項漏洞發生的原因，在於此網頁伺服器系統核心有個遞迴（regression）處理流程中，會忽略採用的部分舊版內容類型（content-type）。在AddType或類似的組態環境裡，某些間接請求檔案的情況，就有可能導致本機原始碼洩露的情況。
關於這項漏洞的嚴重程度，Apache基金會先將其列為高風險（Important）層級，但目前尚未公布CVSS風險評分。
Popular articles
That’s a Wrap: AffPapa Conference Madrid 2026 Highlights
Online Game
New Jersey July Gambling Revenue Hits $606M, Sweeps Casinos Banned
Regulation
1spin4win releases unique slot Don Catleone Hold and Win featuring gangster cats
Online Game
Are you ready to maximize your earnings? Try ProPush.me Constructor!
Marketing
Zenith partners with HUIDU for 2026 World Cup Carnival Official Tour
Online Game
DB Gaming Is One of Asia’s Top-Tier Game Solution Providers, Recognized as a Pioneer in the Asian Gaming Industry.
Marketing
GAT CDMX 2025 Institutional Academy: Leaders and Experts Analyze the Present and Future of the Gaming Industry in Mexico and Lat
Sports Game
Vietnam’s Controlled Gaming Shift Gains Ground, But Domestic Demand Still Lags
Southeast Asia
GAT Expo CDMX 2026 Kicks Off Today in Mexico with a Sold-Out Opening Reception at Big Bola Casino Santa Fe
Marketing
Gaming & Technology Expo Makes a Powerful Entrance in CDMX
Marketing
UK MPs reopen 2025 gambling inquiry as reform stalls
Regulation
JILI Partners with Cricket Legend AB de Villiers (ABD) to Launch Exclusive Branded Game Series 100% 11
Sports Game
Online gambling, crypto pose ongoing money laundering risks in Philippines, analyst says
Southeast Asia
Full House at GAT Expo Cartagena 2026 Academic Agenda
Online Game
Institutional Academy that exceeded expectations marked the opening of GAT CDMX
Online Game
