Apache.Server-Status.Info.Leak

Description

This indicates an attempt to exploit an Information Disclosure vulnerability in Apache server.
The vulnerability is due to insufficient sanitizing of user supplied inputs in the application. A remote attacker can exploit this to gain unauthorized access to information such as IP addresses of people accessing the server, files being accessed, etc.

Affected Products

Apache HTTP Server

Impact

Information Disclosure: Remote attackers can gain information from vulnerable systems.

Recommended Actions

Disable server status on Apache servers.
http://httpd.apache.org/docs/2.2/mod/mod_status.html

References