This host is running Apache Web Server and is prone to Information Disclosure Vulnerability.

Successful exploitation will let the attacker craft a special HTTP POST request and gain sensitive information about the web server. Impact level: Application

Upgrade to Apache HTTP Version 2.2.15 or later For further updates refer, http://httpd.apache.org/download.cgi

This flaw is due to an error in 'mod_proxy_ajp' when handling improperly malformed POST requests.

Apache HTTP Version 2.2.11 Workaround: Update mod_proxy_ajp.c through SVN Repository (Revision 767089) http://www.apache.org/dist/httpd/patches/apply_to_2.2.11/PR46949.diff

• http://secunia.com/advisories/34827
• http://svn.apache.org/viewvc/httpd/httpd/trunk/CHANGES?r1=766938&r2=767089
• http://xforce.iss.net/xforce/xfdb/50059

---

Updated on 2015-03-25