CVE-2012-3526

2012-09-0523:55:01

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.5

Confidence

High

EPSS

0.038

Percentile

91.9%

JSON

The reverse proxy add forward module (mod_rpaf) 0.5 and 0.6 for the Apache HTTP Server allows remote attackers to cause a denial of service (server or application crash) via multiple X-Forwarded-For headers in a request.

Affected configurations

Nvd

Node

thomas_eibnermod_rpafMatch0.5

thomas_eibnermod_rpafMatch0.6

AND

apachehttp_server

VendorProductVersionCPE
thomas_eibnermod_rpaf0.5cpe:2.3:a:thomas_eibner:mod_rpaf:0.5:*:*:*:*:*:*:*
thomas_eibnermod_rpaf0.6cpe:2.3:a:thomas_eibner:mod_rpaf:0.6:*:*:*:*:*:*:*
apachehttp_server*cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
thomas_eibner	mod_rpaf	0.5	cpe:2.3:a:thomas_eibner:mod_rpaf:0.5:::::::*
thomas_eibner	mod_rpaf	0.6	cpe:2.3:a:thomas_eibner:mod_rpaf:0.6:::::::*
apache	http_server	*	cpe:2.3:a:apache:http_server::::::::