Detect CVE-2024–40725 Apache HTTP Server

by@nahuel.vicarius

CVE-2024–40725 5.3 Medium Severity

1. #!/bin/bash
2. # Get the Apache version
3. apache_version=$(apache2 -v | grep “Server version” | awk ‘{print $3}’ | cut -d’/’ -f2)
4. # Compare with the safe version 2.4.62
5. if [[ “$(printf ‘2.4.62\n%s’ “$apache_version” | sort -V | head -n1)” != “2.4.62” ]]; then
6. echo “Vulnerable to CVE-2024–40725: Apache version $apache_version”
7. else
8. echo “Not vulnerable: Apache version $apache_version”
9. fi

Description

🔒 Detecting CVE-2024–40725: Identifying Vulnerable Apache Versions

This detection script helps administrators quickly identify if their Apache HTTP Server is vulnerable to CVE-2024–40725. By checking the installed Apache version, it provides a simple yet effective way to ensure your server is secure or needs urgent attention.

🔍 How it works:

• The script retrieves the currently installed Apache version.
• It compares the version to the patched version (2.4.62) to check if your server is still vulnerable to CVE-2024–40725, which is a critical vulnerability that could expose sensitive code like PHP scripts to unauthorized users.

⚠️ Why it matters:

CVE-2024–40725 exploits a flaw in older Apache versions, potentially allowing attackers to disclose local source code. If you’re running a version prior to 2.4.62, this vulnerability could be active in your system. With this script, you can quickly determine if your server is affected and take immediate action to update or mitigate the issue.

Stay ahead of threats by proactively detecting and addressing vulnerabilities! 🚀