CVE:CVE-2015-3185
CNNVD:CNNVD-201507-660
Apache HTTP Server是美国阿帕奇（Apache）软件基金会的一款开源网页服务器。该服务器具有快速、可靠且可通过简单的API进行扩充的特点。
Apache HTTP Server 2.4.14之前2.4.x版本的server/request.c文件中的‘ap_some_auth_required’函数存在安全漏洞，该漏洞源于程序没有要求执行身份验证时，Require指令仍然会用于授权设置并在配置中显示。远程攻击者可借助特制的模块利用该漏洞绕过既定的访问限制。
solution:Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,15.04,and avoid the version 12.04,14.04,15.04; Upgrade apache http_server to a higher version than 2.4.0,2.4.1,2.4.2,2.4.3,2.4.4,2.4.6,2.4.7,2.4.8,2.4.9,2.4.10,2.4.12,2.4.13,and avoid the version 2.4.0,2.4.1,2.4.2,2.4.3,2.4.4,2.4.6,2.4.7,2.4.8,2.4.9,2.4.10,2.4.12,2.4.13; Upgrade apple xcode to a higher version than 7.0,and avoid the version 7.0; Upgrade apple mac_os_x to a higher version than 10.10.4,and avoid the version 10.10.4; Upgrade apple mac_os_x_server to a higher version than 5.0.3,and avoid the version 5.0.3