CVE:CVE-2012-0053
CNNVD:CNNVD-201201-403
Apache HTTP Server是美国阿帕奇（Apache）软件基金会的一款开源网页服务器。该服务器具有快速、可靠且可通过简单的API进行扩充的特点。
Apache HTTP Server 2.2.x版本至2.2.21版本中的protocol.c中存在漏洞，该漏洞源于在Bad Request（也称400）的构建过程中未正确限制表头信息。远程攻击者可利用此漏洞借助带有(1)长整形或(2)畸形的表头连接特制web脚本，向量获得HTTPOnly cookies值。
solution:Upgrade apache http_server to a higher version than 2.0.65,2.2.22,and avoid the version [2.0.0,2.0.65),[2.2.0,2.2.22); Upgrade debian debian_linux to a higher version than 5.0,6.0,7.0,and avoid the version 5.0,6.0,7.0; Upgrade opensuse opensuse to a higher version than 11.4,and avoid the version 11.4; Upgrade suse linux_enterprise_server to a higher version than 10:sp4,and avoid the version 10:sp4; Upgrade suse linux_enterprise_software_development_kit to a higher version than 10:sp4,and avoid the version 10:sp4; Upgrade redhat storage to a higher version than 2.0,and avoid the version 2.0; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_eus to a higher version than 6.2,and avoid the version 6.2; Upgrade redhat enterprise_linux_server to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat jboss_enterprise_web_server to a higher version than 1.0.0,and avoid the version 1.0.0