Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2012-1181HistoryMar 19, 2012 - 9:55 p.m.
CVE-2012-1181
2012-03-1921:55:01
Debian Security Bug Tracker
security-tracker.debian.org
11
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS
0.012
Percentile
84.9%
fcgid_spawn_ctl.c in the mod_fcgid module 2.3.6 for the Apache HTTP Server does not recognize the FcgidMaxProcessesPerClass directive for a virtual host, which makes it easier for remote attackers to cause a denial of service (memory consumption) via a series of HTTP requests that triggers a process count higher than the intended limit.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | libapache2-mod-fcgid | < 1:2.3.6-1.1 | libapache2-mod-fcgid_1:2.3.6-1.1_all.deb |
| Debian | 11 | all | libapache2-mod-fcgid | < 1:2.3.6-1.1 | libapache2-mod-fcgid_1:2.3.6-1.1_all.deb |
| Debian | 999 | all | libapache2-mod-fcgid | < 1:2.3.6-1.1 | libapache2-mod-fcgid_1:2.3.6-1.1_all.deb |
| Debian | 13 | all | libapache2-mod-fcgid | < 1:2.3.6-1.1 | libapache2-mod-fcgid_1:2.3.6-1.1_all.deb |
Related
debian
debian
[SECURITY] [DSA 2436-1] libapache2-mod-fcgid security update
2012-03-19 19:24:30
securityvulns
securityvulns
[SECURITY] [DSA 2436-1] libapache2-mod-fcgid security update
2012-03-20 00:00:00
Apache FCGID module resources exhaustion
2012-03-20 00:00:00
ubuntucve
ubuntucve
CVE-2012-1181
2012-03-19 00:00:00
nessus
nessus
Debian DSA-2436-1 : libapache2-mod-fcgid - inactive resource limits
2012-03-20 00:00:00
GLSA-201207-09 : mod_fcgid: Multiple vulnerabilities
2012-07-10 00:00:00
prion
prion
Design/Logic Flaw
2012-03-19 21:55:00
openvas
openvas
Debian: Security Advisory (DSA-2436-1)
2012-04-30 00:00:00
Debian Security Advisory DSA 2436-1 (libapache2-mod-fcgid)
2012-04-30 00:00:00
Gentoo Security Advisory GLSA 201207-09 (mod_fcgid)
2012-08-10 00:00:00
cvelist
cvelist
CVE-2012-1181
2012-03-19 21:00:00
cve
cve
CVE-2012-1181
2012-03-19 21:55:01
nvd
nvd
CVE-2012-1181
2012-03-19 21:55:01
gentoo
gentoo
mod_fcgid: Multiple vulnerabilities
2012-07-09 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS
0.012
Percentile
84.9%
Related for DEBIANCVE:CVE-2012-1181