NISCC Vulnerability Advisory 403518/NISCC/APACHE – Two new vulnerabilities have been discovered in Apache. Through the testing of Apache by using the Codenomicon HTTP Test Tool, the ASF Security Team has discovered a bug in the apr-util library, which can lead to arbitrary code execution. SITIC have discovered that Apache suffers from a buffer overflow when expanding environment variables in configuration files such as .htaccess and httpd.conf, leading to possible privilege escalation. These vulnerabilities affect versions 2.0.35 through 2.0.50.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/34368/NISCC-403518.html
Source: https://packetstormsecurity.com/files/34368/NISCC-Security-Advisory-403518.html