According to its banner, the version of Apache 2.2.x running on the remote host is prior to 2.2.9. It is, therefore, affected by multiple vulnerabilities :

  - Improper handling of excessive forwarded interim     responses may cause denial of service conditions in     mod_proxy_http. (CVE-2008-2364)

  - A cross-site request forgery vulnerability in the     balancer-manager interface of mod_proxy_balancer.
    (CVE-2007-6420)

Note that the remote web server may not actually be affected by these vulnerabilities. Nessus did not try to determine whether the affected modules are in use or to check for the issues themselves.

バナーによると、リモートホストにインストールされている Apache 2.2 のバージョンは 2.2.9 より前です。そのようなバージョンは、以下を含むいくつかの問題の影響を受けることがあります。

  - 転送された過度の一時的応答の不適切な取り扱いにより、mod_proxy_http でサービス拒否状態が発生することがあります。（CVE-2008-2364）

  - mod_proxy_balancer のバランサ/マネージャインターフェイスでのクロスサイトリクエストフォージェリ脆弱性。
    （CVE-2007-6420）

リモート Web サーバーは、実際にはこれらの脆弱性の影響を受けない可能性があることに、注意してください。Nessus は、影響を受けるモジュールが使用されているか、または問題そのものを確認しようとしませんでした。

根據其標題，遠端主機上執行的 Apache 2.2.x 版本比 2.2.9 舊。因此，該應用程式受到多個弱點影響：

  - 不當處理過多轉寄的中繼回應，可能導致 mod_proxy_http 中發生拒絕服務情形。(CVE-2008-2364)

  - mod_proxy_balancer 的平衡器管理員介面中有一個跨網站要求偽造弱點。
    (CVE-2007-6420)

請注意，遠端 Web 伺服器可能實際上並不會受這些弱點影響。Nessus 並未嘗試判定受影響的模組是否正在使用中，也未嘗試檢查問題本身。

根据其标题，远程主机上运行的 Apache 2.2.x 版本低于 2.2.9。因此，该服务器受到多个漏洞的影响：

  - 未正确处理过量转发的临时响应可导致 mod_proxy_http 中出现拒绝服务情况。(CVE-2008-2364)

  - mod_proxy_balancer 的 balancer-manager 接口中存在跨站请求伪造漏洞。
    (CVE-2007-6420)

请注意远程 Web 服务器实际上可能不会受到这些漏洞的影响。Nessus 没有尝试确定是否正在使用受影响的模块，也没有自行检查问题。

According to its banner, the version of Apache 2.2 installed on the remote host is older than 2.2.9.  Such versions may be affected by several issues, including :

  - Improper handling of excessive forwarded interim responses may cause denial of service conditions in mod_proxy_http (CVE-2008-2364).
  - A cross-site request forgery vulnerability in the balancer-manager interface of mod_proxy_balancer (CVE-2007-6420).
  - An issue exists in the handling of the 'Options' and 'AllowOverride' directives (CVE-2009-1195).

Note that the remote web server may not actually be affected by these vulnerabilities.  NNM cannot determine whether the affected modules are in use.

The version of Apache installed on the remote host is advertising a version older than 2.2.8.  Such versions may be affected by several issues, including :

 - A cross-site scripting issue involving mod_imagemap (CVE-2007-5000).

 - A cross-site scripting issue involving 413 error pages via a malformed HTTP method (PR 44014 / CVE-2007-6203).

 - A cross-site scripting issue in mod_status involving the refresh parameter (CVE-2007-6388).

 - A cross-site scripting issue in mod_proxy_balancer involving the worker route and worker redirect string of the balancer manager (CVE-2007-6421).

 - A denial of service issue in the balancer_handler function in mod_proxy_balancer can be triggered by an authenticated user when a threaded Multi-Processing Module is used (CVE-2007-6422).

 - A cross-site scripting issue using UTF-7 encoding in mod_proxy_ftp exists because it does not define a charset (CVE-2008-0005).

According to its banner, the version of Apache 2.2 installed on the remote host is older than 2.2.9.  Such versions may be affected by several issues, including :

  - Improper handling of excessive forwarded interim responses may cause denial of service conditions in mod_proxy_http (CVE-2008-2364).
  - A cross-site request forgery vulnerability in the balancer-manager interface of mod_proxy_balancer (CVE-2007-6420).
  - An issue exists in the handling of the 'Options' and 'AllowOverride' directives (CVE-2009-1195).

Note that the remote web server may not actually be affected by these vulnerabilities.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
33477	Apache 2.2.x < 2.2.9 Multiple Vulnerabilities (DoS, XSS)	Nessus	Web Servers	2008/7/11	2018/6/29	medium
33477	Apache < 2.2.9 の複数の脆弱性（DoS、XSS）	Nessus	Web Servers	2008/7/11	2018/6/29	medium
33477	Apache2.2.x < 2.2.9 多個弱點 (DoS、XSS)	Nessus	Web Servers	2008/7/11	2018/6/29	medium
33477	Apache 2.2.x < 2.2.9 多个漏洞（DoS、XSS）	Nessus	Web Servers	2008/7/11	2018/6/29	medium
4579	Apache < 2.2.9 Multiple Vulnerabilities	Nessus Network Monitor	Web Servers	2004/8/18	2019/3/6	high
4385	Apache < 2.2.8 Multiple Vulnerabilities	Nessus Network Monitor	Web Servers	2008/2/20	2019/3/6	high
800581	Apache < 2.2.8 Multiple Vulnerabilities	Log Correlation Engine	Web Servers			low
800558	Apache < 2.2.9 Multiple Vulnerabilities	Log Correlation Engine	Web Servers			medium

検出

プラグインの検索

medium

medium

medium

medium

high

high

low

medium