© 2026 vulntracker.io

CVE-2010-2791

N/A

Published: August 5, 2010 at 06:00 PM UTC

Updated: June 16, 2026 at 11:21 PM UTC

1 product affected across 1 vendorHTTP Server· also runs on 1 platform

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 8%

Description

mod_proxy in httpd in Apache HTTP Server 2.2.9, when running on Unix, does not close the backend connection if a timeout occurs when reading a response from a persistent connection, which allows remote attackers to obtain a potentially sensitive response intended for a different client in opportunistic circumstances via a normal HTTP request. NOTE: this is the same issue as CVE-2010-2068, but for a different OS and set of affected versions.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

HTTP Server · Apache

95%

unix-unix (environment)

Runs on — not affected

The affected product only carries this flaw when running on these platforms. The platforms themselves are not vulnerable.

95%

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (21)

Vendor Advisoryx_refsource_MANDRIVA

Source: [email protected]

http://www.mandriva.com/security/advisories?name=MDVSA-2013:150

Mailing Listx_refsource_MLIST

Source: [email protected]

http://www.openwall.com/lists/oss-security/2010/07/30/1

x_refsource_CONFIRM

Source: [email protected]

http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html

Vendor Advisoryx_refsource_REDHAT

Source: [email protected]

http://www.redhat.com/support/errata/RHSA-2010-0659.html

VDB Entryx_refsource_BID

Source: [email protected]

http://www.securityfocus.com/bid/42102

VDB Entryx_refsource_XF

Source: [email protected]

https://exchange.xforce.ibmcloud.com/vulnerabilities/60883

Mailing Listx_refsource_MLIST

Source: [email protected]

https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E

Mailing Listx_refsource_MLIST

Source: [email protected]

https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E

CVSS

5MEDIUM[email protected]

Confidentiality: PARTIAL
Integrity: NONE
Availability: NONE

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-200

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card