CVE:CVE-2011-3639
CNNVD:CNNVD-201111-509
Apache HTTP Server是美国阿帕奇（Apache）基金会的一款开源网页服务器。该服务器具有快速、可靠且可通过简单的API进行扩充的特点。
Apache HTTP Server 2.0.x版本至2.0.64版本、2.2.x版本至2.2.18之前版本存在输入验证错误漏洞。远程攻击者利用该漏洞使用HTTP/0.9协议和包含@的格式错误的URI向Intranet服务器发送请求。
solution:Upgrade apache http_server to a higher version than 2.0.11,2.0.12,2.0.13,2.0.14,2.0.15,2.0.16,2.0.17,2.0.18,2.0.19,2.0.20,2.0.21,2.0.22,2.0.23,2.0.24,2.0.25,2.0.26,2.0.27,2.0.28,2.0.29,2.0.30,2.0.31,2.0.32,2.0.33,2.0.34,2.0.35,2.0.36,2.0.37,2.0.38,2.0.39,2.0.40,2.0.41,2.0.42,2.0.43,2.0.44,2.0.45,2.0.46,2.0.47,2.0.48,2.0.49,2.0.50,2.0.51,2.0.52,2.0.53,2.0.54,2.0.55,2.0.56,2.0.57,2.0.58,2.0.59,2.0.61,2.0.63,2.2.0,2.2.1,2.2.2,2.2.3,2.2.4,2.2.6,2.2.8,2.2.9,2.2.10,2.2.11,2.2.12,2.2.13,2.2.14,2.2.15,2.2.16,2.2.17,and avoid the version 2.0.11,2.0.12,2.0.13,2.0.14,2.0.15,2.0.16,2.0.17,2.0.18,2.0.19,2.0.20,2.0.21,2.0.22,2.0.23,2.0.24,2.0.25,2.0.26,2.0.27,2.0.28,2.0.29,2.0.30,2.0.31,2.0.32,2.0.33,2.0.34,2.0.35,2.0.36,2.0.37,2.0.38,2.0.39,2.0.40,2.0.41,2.0.42,2.0.43,2.0.44,2.0.45,2.0.46,2.0.47,2.0.48,2.0.49,2.0.50,2.0.51,2.0.52,2.0.53,2.0.54,2.0.55,2.0.56,2.0.57,2.0.58,2.0.59,2.0.61,2.0.63,2.2.0,2.2.1,2.2.2,2.2.3,2.2.4,2.2.6,2.2.8,2.2.9,2.2.10,2.2.11,2.2.12,2.2.13,2.2.14,2.2.15,2.2.16,2.2.17; Upgrade apache http_server2.0a1 to a higher version than *; Upgrade apache http_server2.0a2 to a higher version than *; Upgrade apache http_server2.0a3 to a higher version than *; Upgrade apache http_server2.0a4 to a higher version than *; Upgrade apache http_server2.0a5 to a higher version than *; Upgrade apache http_server2.0a6 to a higher version than *; Upgrade apache http_server2.0a7 to a higher version than *; Upgrade apache http_server2.0a8 to a higher version than *; Upgrade apache http_server2.0a9 to a higher version than *