Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-4317
HistoryNov 29, 2011 - 12:00 a.m.

CVE-2011-4317

2011-11-2900:00:00
ubuntu.com
ubuntu.com
17

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.974 High

EPSS

Percentile

99.9%

The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x
through 2.0.64, and 2.2.x through 2.2.21, when the Revision 1179239 patch
is in place, does not properly interact with use of (1) RewriteRule and (2)
ProxyPassMatch pattern matches for configuration of a reverse proxy, which
allows remote attackers to send requests to intranet servers via a
malformed URI containing an @ (at sign) character and a : (colon) character
in invalid positions. NOTE: this vulnerability exists because of an
incomplete fix for CVE-2011-3368.

Bugs

Notes

Author Note
mdeslaur the following commit introduces the apr_uri functionnality required for the vulnerability to work: http://svn.apache.org/viewvc?view=revision&revision=594624
OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchapache2< 2.2.8-1ubuntu0.23UNKNOWN
ubuntu10.04noarchapache2< 2.2.14-5ubuntu8.8UNKNOWN
ubuntu10.10noarchapache2< 2.2.16-1ubuntu3.5UNKNOWN
ubuntu11.04noarchapache2< 2.2.17-1ubuntu1.5UNKNOWN
ubuntu11.10noarchapache2< 2.2.20-1ubuntu1.2UNKNOWN

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.974 High

EPSS

Percentile

99.9%