{"id":8489,"date":"2019-04-12T03:19:29","date_gmt":"2019-04-12T03:19:29","guid":{"rendered":"https:\/\/nsfocusglobal.com\/?p=8489"},"modified":"2026-04-17T18:07:54","modified_gmt":"2026-04-17T18:07:54","slug":"apache-http-server-privilege-escalation-vulnerability-cve-2019-0211-threat-alert-2","status":"publish","type":"post","link":"https:\/\/nsfocusglobal.com\/pt-br\/apache-http-server-privilege-escalation-vulnerability-cve-2019-0211-threat-alert-2\/","title":{"rendered":"Apache HTTP Server Privilege Escalation Vulnerability Threat Alert"},"content":{"rendered":"


\n<\/p>\n

1 Vulnerability Overview<\/strong><\/h2>\n

Recently, Apache released a security advisory, announcing remediation of a privilege escalation vulnerability (CVE-2019-0211). Apache HTTP Server running MPM event, worker or, prefork could allow a less-privileged child thread or process (including scripts executed by an in-process scripting interpreter) to execute arbitrary code with privileges of the parent process (usually root) by manipulating the scoreboard.<\/p>\n

Apache HTTP Server is an open-source web server from the Apache Software Foundation. Thanks to its capability of working across platforms, it has been widely used and become one of the most popular web server programs. According to data from NSFOCUS Threat Intelligence center (NTI), the number of Apache-enabled assets publicly available worldwide exceeds 52 million.<\/p>\n

\"Red<\/a><\/p>\n

Reference link:<\/p>\n

https:\/\/httpd.apache.org\/security\/vulnerabilities_24.html#CVE-2019-0211<\/p>\n

2 Scope of Impact<\/strong><\/h2>\n

Affected Versions<\/p>\n