CVE-2012-1181

2012-03-1900:00:00

ubuntu.com

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.012 Low

EPSS

Percentile

84.9%

JSON

fcgid_spawn_ctl.c in the mod_fcgid module 2.3.6 for the Apache HTTP Server
does not recognize the FcgidMaxProcessesPerClass directive for a virtual
host, which makes it easier for remote attackers to cause a denial of
service (memory consumption) via a series of HTTP requests that triggers a
process count higher than the intended limit.

Bugs

<http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=615814>

OSVersionArchitecturePackageVersionFilename
ubuntu11.04noarchlibapache2-mod-fcgid< 1:2.3.6-1+squeeze1build0.11.04.1UNKNOWN
ubuntu11.10noarchlibapache2-mod-fcgid< 1:2.3.6-1+squeeze1build0.11.10.1UNKNOWN
ubuntu12.04noarchlibapache2-mod-fcgid< 1:2.3.6-1.1UNKNOWN
ubuntu12.10noarchlibapache2-mod-fcgid< 1:2.3.6-1.1UNKNOWN
ubuntu13.04noarchlibapache2-mod-fcgid< 1:2.3.6-1.1UNKNOWN
ubuntu13.10noarchlibapache2-mod-fcgid< 1:2.3.6-1.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	11.04	noarch	libapache2-mod-fcgid	< 1:2.3.6-1+squeeze1build0.11.04.1	UNKNOWN
ubuntu	11.10	noarch	libapache2-mod-fcgid	< 1:2.3.6-1+squeeze1build0.11.10.1	UNKNOWN
ubuntu	12.04	noarch	libapache2-mod-fcgid	< 1:2.3.6-1.1	UNKNOWN
ubuntu	12.10	noarch	libapache2-mod-fcgid	< 1:2.3.6-1.1	UNKNOWN
ubuntu	13.04	noarch	libapache2-mod-fcgid	< 1:2.3.6-1.1	UNKNOWN
ubuntu	13.10	noarch	libapache2-mod-fcgid	< 1:2.3.6-1.1	UNKNOWN