CVE:CVE-2017-3167
CNNVD:CNNVD-201706-789
Apache httpd是美国阿帕奇（Apache）软件基金会的一款专为现代操作系统开发和维护的开源HTTP服务器。
Apache httpd 2.2.33之前的2.2.x版本和2.4.26之前的2.4.x版本存在安全漏洞。攻击者可利用该漏洞绕过身份验证。
solution:Upgrade apache http_server to a higher version than 2.2.33,2.4.26,and avoid the version [2.2.0,2.2.33),[2.4.0,2.4.26); Upgrade netapp clustered_data_ontap to a higher version than -; Upgrade netapp oncommand_unified_manager to a higher version than -; Upgrade netapp storagegrid to a higher version than -; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_eus to a higher version than 6.7,7.2,7.3,7.4,7.5,7.6,7.7,and avoid the version 6.7,7.2,7.3,7.4,7.5,7.6,7.7; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.2,7.3,7.4,7.6,7.7,and avoid the version 7.2,7.3,7.4,7.6,7.7; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.2,7.3,7.4,7.6,7.7,and avoid the version 7.2,7.3,7.4,7.6,7.7; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat jboss_core_services to a higher version than 1.0,and avoid the version 1.0; Upgrade apple mac_os_x to a higher version than 10.13.1,and avoid the version (,10.13.1); Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade oracle secure_global_desktop to a higher version than 5.3,and avoid the version 5.3