Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2012-0021
HistoryJan 28, 2012 - 4:05 a.m.

CVE-2012-0021

2012-01-2804:05:00
CWE-20
[email protected]
web.nvd.nist.gov
7

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

AI Score

6.2

Confidence

Low

EPSS

0.924

Percentile

99.0%

JSON

The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server 2.2.17 through 2.2.21, when a threaded MPM is used, does not properly handle a %{}C format string, which allows remote attackers to cause a denial of service (daemon crash) via a cookie that lacks both a name and a value.

Affected configurations

Nvd
Node
apachehttp_serverMatch2.2.17
OR
apachehttp_serverMatch2.2.18
OR
apachehttp_serverMatch2.2.19
OR
apachehttp_serverMatch2.2.20
OR
apachehttp_serverMatch2.2.21

References

Related

debiancve 1
ubuntucve 1
checkpoint_advisories 2
prion 1
httpd 1
cvelist 1
nessus 19
openvas 22
cve 1
f5 4
ubuntu 1
fedora 1
securityvulns 3
slackware 1
altlinux 3
freebsd 1
redhat 2
gentoo 1
oracle 1
debiancve
debiancve
CVE-2012-0021
2012-01-28 04:05:00
ubuntucve
ubuntucve
CVE-2012-0021
2012-01-27 00:00:00
checkpoint_advisories
checkpoint_advisories
Apache HTTPD mod_log_config Cookie Handling Denial of Service - High Confidence (CVE-2012-0021)
2013-04-23 00:00:00
Apache HTTPD mod_log_config Cookie Handling Denial of Service (CVE-2012-0021)
2012-05-14 00:00:00
prion
prion
Format string
2012-01-28 04:05:00
httpd
httpd
Apache Httpd < 2.2.22 : mod_log_config crash
2011-12-30 00:00:00
cvelist
cvelist
CVE-2012-0021
2012-01-28 02:00:00
nessus
nessus
Oracle Solaris Third-Party Patch Update : apache (cve_2012_0021_improper_input)
2015-01-19 00:00:00
Mandriva Linux Security Advisory : apache (MDVSA-2012:012)
2012-02-03 00:00:00
Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 / 11.10 : apache2 vulnerabilities (USN-1368-1)
2012-02-17 00:00:00
openvas
openvas
Apache HTTP Server DoS Vulnerability (Nov 2011) - Linux
2021-11-01 00:00:00
Mandriva Update for apache MDVSA-2012:012 (apache)
2012-02-03 00:00:00
Mandriva Update for apache MDVSA-2012:012 (apache)
2012-02-03 00:00:00
cve
cve
CVE-2012-0021
2012-01-28 04:05:00
f5
f5
K15894 : Apache vulnerabilities CVE-2012-4557 and CVE-2012-0021
2014-12-05 00:00:00
SOL15894 - Apache vulnerabilities CVE-2012-4557 and CVE-2012-0021
2014-12-04 00:00:00
SOL15889 - Apache HTTP server vulnerabilities CVE-2011-3368, CVE-2011-4317, CVE-2012-0021, CVE-2012-0031, and CVE-2012-0053
2014-12-03 00:00:00
ubuntu
ubuntu
Apache HTTP Server vulnerabilities
2012-02-16 00:00:00
fedora
fedora
[SECURITY] Fedora 15 Update: httpd-2.2.22-1.fc15
2012-03-06 19:30:50
securityvulns
securityvulns
[Announce] Apache HTTP Server 2.2.22 Released
2012-02-03 00:00:00
Apache multiple security vulnerabilities
2012-02-03 00:00:00
APPLE-SA-2012-09-19-2 OS X Mountain Lion v10.8.2, OS X Lion v10.7.5 and Security Update 2012-004
2012-09-24 00:00:00
slackware
slackware
[slackware-security] httpd
2012-02-10 17:43:57
altlinux
altlinux
Security fix for the ALT Linux 8 package apache2 version 2.2.22-alt1
2012-02-02 00:00:00
Security fix for the ALT Linux 9 package apache2 version 2.2.22-alt1
2012-02-02 00:00:00
Security fix for the ALT Linux 10 package apache2 version 2.2.22-alt1
2012-02-02 00:00:00
freebsd
freebsd
apache -- multiple vulnerabilities
2011-10-05 00:00:00
redhat
redhat
(RHSA-2012:0543) Moderate: httpd security and bug fix update
2012-05-07 18:13:40
(RHSA-2012:0542) Moderate: httpd security and bug fix update
2012-05-07 00:00:00
gentoo
gentoo
Apache HTTP Server: Multiple vulnerabilities
2012-06-24 00:00:00
oracle
oracle
Oracle Critical Patch Update - July 2012
2012-07-17 00:00:00

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

AI Score

6.2

Confidence

Low

EPSS

0.924

Percentile

99.0%

JSON
Related for NVD:CVE-2012-0021
debiancve1ubuntucve1checkpoint_advisories2prion1httpd1cvelist1nessus19openvas22cve1f54ubuntu1fedora1securityvulns3slackware1altlinux3freebsd1redhat2gentoo1oracle1