Lucene search

[email protected]CVE-2011-3368

HistoryOct 05, 2011 - 10:55 p.m.

CVE-2011-3368

2011-10-0522:55:02

CWE-20

[email protected]

web.nvd.nist.gov

940

cve-2011-3368

apache http server

mod_proxy

rewriterule

proxypassmatch

reverse proxy

uri

security vulnerability

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

9.2 High

AI Score

Confidence

High

0.974 High

EPSS

Percentile

99.9%

JSON

The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an initial @ (at sign) character.

Affected configurations

NVD

Node

apachehttp_serverMatch1.3

apachehttp_serverMatch1.3.0

apachehttp_serverMatch1.3.1

apachehttp_serverMatch1.3.1.1

apachehttp_serverMatch1.3.2

apachehttp_serverMatch1.3.3

apachehttp_serverMatch1.3.4

apachehttp_serverMatch1.3.5

apachehttp_serverMatch1.3.6

apachehttp_serverMatch1.3.7

apachehttp_serverMatch1.3.8

apachehttp_serverMatch1.3.9

apachehttp_serverMatch1.3.10

apachehttp_serverMatch1.3.11

apachehttp_serverMatch1.3.12

apachehttp_serverMatch1.3.13

apachehttp_serverMatch1.3.14

apachehttp_serverMatch1.3.15

apachehttp_serverMatch1.3.16

apachehttp_serverMatch1.3.17

apachehttp_serverMatch1.3.18

apachehttp_serverMatch1.3.19

apachehttp_serverMatch1.3.20

apachehttp_serverMatch1.3.22

apachehttp_serverMatch1.3.23

apachehttp_serverMatch1.3.24

apachehttp_serverMatch1.3.25

apachehttp_serverMatch1.3.26

apachehttp_serverMatch1.3.27

apachehttp_serverMatch1.3.28

apachehttp_serverMatch1.3.29

apachehttp_serverMatch1.3.30

apachehttp_serverMatch1.3.31

apachehttp_serverMatch1.3.32

apachehttp_serverMatch1.3.33

apachehttp_serverMatch1.3.34

apachehttp_serverMatch1.3.35

apachehttp_serverMatch1.3.36

apachehttp_serverMatch1.3.37

apachehttp_serverMatch1.3.38

apachehttp_serverMatch1.3.39

apachehttp_serverMatch1.3.41

apachehttp_serverMatch1.3.42

apachehttp_serverMatch1.3.65

apachehttp_serverMatch1.3.68

Node

apachehttp_serverMatch2.0

apachehttp_serverMatch2.0.9

apachehttp_serverMatch2.0.28

apachehttp_serverMatch2.0.28beta

apachehttp_serverMatch2.0.32

apachehttp_serverMatch2.0.32beta

apachehttp_serverMatch2.0.34beta

apachehttp_serverMatch2.0.35

apachehttp_serverMatch2.0.36

apachehttp_serverMatch2.0.37

apachehttp_serverMatch2.0.38

apachehttp_serverMatch2.0.39

apachehttp_serverMatch2.0.40

apachehttp_serverMatch2.0.41

apachehttp_serverMatch2.0.42

apachehttp_serverMatch2.0.43

apachehttp_serverMatch2.0.44

apachehttp_serverMatch2.0.45

apachehttp_serverMatch2.0.46

apachehttp_serverMatch2.0.47

apachehttp_serverMatch2.0.48

apachehttp_serverMatch2.0.49

apachehttp_serverMatch2.0.50

apachehttp_serverMatch2.0.51

apachehttp_serverMatch2.0.52

apachehttp_serverMatch2.0.53

apachehttp_serverMatch2.0.54

apachehttp_serverMatch2.0.55

apachehttp_serverMatch2.0.56

apachehttp_serverMatch2.0.57

apachehttp_serverMatch2.0.58

apachehttp_serverMatch2.0.59

apachehttp_serverMatch2.0.60

apachehttp_serverMatch2.0.61

apachehttp_serverMatch2.0.63

apachehttp_serverMatch2.0.64

Node

apachehttp_serverMatch2.2.0

apachehttp_serverMatch2.2.1

apachehttp_serverMatch2.2.2

apachehttp_serverMatch2.2.3

apachehttp_serverMatch2.2.4

apachehttp_serverMatch2.2.6

apachehttp_serverMatch2.2.8

apachehttp_serverMatch2.2.9

apachehttp_serverMatch2.2.10

apachehttp_serverMatch2.2.11

apachehttp_serverMatch2.2.12

apachehttp_serverMatch2.2.13

apachehttp_serverMatch2.2.14

apachehttp_serverMatch2.2.15

apachehttp_serverMatch2.2.16

apachehttp_serverMatch2.2.18

apachehttp_serverMatch2.2.19

apachehttp_serverMatch2.2.20

apachehttp_serverMatch2.2.21

CPENameOperatorVersion
apache:http_serverapache http servereq1.3
apache:http_serverapache http servereq1.3.0
apache:http_serverapache http servereq1.3.1
apache:http_serverapache http servereq1.3.1.1
apache:http_serverapache http servereq1.3.2
apache:http_serverapache http servereq1.3.3
apache:http_serverapache http servereq1.3.4
apache:http_serverapache http servereq1.3.5
apache:http_serverapache http servereq1.3.6
apache:http_serverapache http servereq1.3.7

CPE	Name	Operator	Version
apache:http_server	apache http server	eq	1.3
apache:http_server	apache http server	eq	1.3.0
apache:http_server	apache http server	eq	1.3.1
apache:http_server	apache http server	eq	1.3.1.1
apache:http_server	apache http server	eq	1.3.2
apache:http_server	apache http server	eq	1.3.3
apache:http_server	apache http server	eq	1.3.4
apache:http_server	apache http server	eq	1.3.5
apache:http_server	apache http server	eq	1.3.6
apache:http_server	apache http server	eq	1.3.7

Rows per page:

1-10 of 451

References

kb.juniper.net/JSA10585

lists.apple.com/archives/security-announce/2012/Sep/msg00004.html

lists.opensuse.org/opensuse-security-announce/2011-11/msg00011.html

lists.opensuse.org/opensuse-updates/2013-02/msg00009.html

lists.opensuse.org/opensuse-updates/2013-02/msg00012.html

marc.info/?l=bugtraq&m=133294460209056&w=2

marc.info/?l=bugtraq&m=134987041210674&w=2

osvdb.org/76079

rhn.redhat.com/errata/RHSA-2012-0542.html

rhn.redhat.com/errata/RHSA-2012-0543.html

seclists.org/fulldisclosure/2011/Oct/232

seclists.org/fulldisclosure/2011/Oct/273

secunia.com/advisories/46288

secunia.com/advisories/46414

secunia.com/advisories/48551

support.apple.com/kb/HT5501

svn.apache.org/viewvc?view=revision&revision=1179239

web.archiveorange.com/archive/v/ZyS0hzECD5zzb2NkvQlt

www-01.ibm.com/support/docview.wss?uid=nas2064c7e5f53452ff686257927003c8d42

www-01.ibm.com/support/docview.wss?uid=nas2b7c57b1f1035675186257927003c8d48

www.contextis.com/research/blog/reverseproxybypass/

www.debian.org/security/2012/dsa-2405

www.exploit-db.com/exploits/17969

www.mandriva.com/security/advisories?name=MDVSA-2011:144

www.mandriva.com/security/advisories?name=MDVSA-2013:150

www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

www.oracle.com/technetwork/topics/security/cpujul2012-392727.html

www.redhat.com/support/errata/RHSA-2011-1391.html

www.redhat.com/support/errata/RHSA-2011-1392.html

www.securityfocus.com/bid/49957

www.securitytracker.com/id?1026144

bugzilla.redhat.com/show_bug.cgi?id=740045

exchange.xforce.ibmcloud.com/vulnerabilities/70336

lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E

lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E

lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E

lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E

lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E

lists.apache.org/thread.html/r064df0985779b7ee044d3120d71ba59750427cf53f57ba3384e3773f%40%3Ccvs.httpd.apache.org%3E

lists.apache.org/thread.html/r1d201e3da31a2c8aa870c8314623caef7debd74a13d0f25205e26f15%40%3Ccvs.httpd.apache.org%3E

lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E

lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E

lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E

lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E

lists.apache.org/thread.html/r688df6f16f141e966a0a47f817e559312b3da27886f59116a94b273d%40%3Ccvs.httpd.apache.org%3E

lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E

lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E

lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E

lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E

lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E

lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E

lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E

lists.apache.org/thread.html/re2e23465bbdb17ffe109d21b4f192e6b58221cd7aa8797d530b4cd75%40%3Ccvs.httpd.apache.org%3E

lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E

lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

9.2 High

AI Score

Confidence

High

0.974 High

EPSS

Percentile

99.9%

JSON

CVE-2011-3368

Affected configurations

References

Related