Apr 5, 2019

ICDSoft servers not affected by Apache vulnerability CVE-2019-0211

A privilege escalation vulnerability (CVE-2019-0211) in the Apache web server was recently discovered. This vulnerability is particularly bad for some shared hosting providers, as it may allow unprivileged scripts to take over the main Apache process.

The Apache instances running on our servers are not affected by this vulnerability, as they are protected by the suEXEC security mechanism. Nonetheless, since our system administrators regularly update all software on our servers, a patch for this vulnerability has already been applied.