Forum Moderators: phranque
Apache HTTP Server has been given a patch to address a potentially serious elevation of privilege vulnerability.[theregister.co.uk...]
Designated CVE-2019-0211, the flaw allows a "worker" process to change its privileges when the host server resets itself, potentially allowing anyone with a local account to run commands with root clearance, essentially giving them complete control over the targeted machine.
From version 2.4.17 (Oct 9, 2015) to version 2.4.38 (Apr 1, 2019), Apache HTTP suffers from a local root privilege escalation vulnerability due to an out-of-bounds array access leading to an arbitrary function call. The vulnerability is triggered when Apache gracefully restarts (apache2ctl graceful). In standard Linux configurations, the logrotate utility runs this command once a day, at 6:25AM, in order to reset log file handles.
The vulnerability is triggered when Apache gracefully restartsI see what they mean, but it still seems backward. It’s when you don’t restart “gracefully” that things are supposed to go wrong!
