PT-2011-5194 · Apache+2 · Apache Http Server+2

Halfdog · Publicado 2011-11-28 · Atualizado 2024-06-15 · CVE-2012-0021

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Baixa

Vetor base

AV:N/AC:H/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.2.17 through 2.2.21

Description The issue is related to the mod log config module, specifically the log cookie function in mod log config.c. When a threaded MPM is used, it does not properly handle a %{cookiename}C format string. This allows remote attackers to cause a denial of service (daemon crash) via a cookie that lacks both a name and a value, or by sending a specific cookie.

Recommendations For Apache HTTP Server versions 2.2.17 through 2.2.21, consider disabling the mod log config module or avoiding the use of the '%{cookiename}C' log format string until a patch is available. Restrict access to the server to minimize the risk of exploitation.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2012-0021

HPSBUX02761

OPENSUSE-SU-2024:10268-1

RHSA-2012:0542

SUSE-SU-2013_0389-1

SUSE-SU-2013_0469-1

SUSE-SU-2013_0830-1

SUSE-SU-2017:2907-1

Produtos afetados

Apache Http Server

Hp-Ux

Suse

Referências · 164

• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/slowloris.py · Nota
• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/rewrite_proxy_bypass.rb · Nota
• https://github.com/XDLDCG/bash-tls-reneg-attack · Nota
• https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9@%3Ccvs.httpd.apache.org%3E · Nota
• https://suse.com/security/cve/CVE-2014-3583 · Nota
• https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E · Nota
• http://lists.suse.com/mailman/listinfo/sle-security-updates · Nota
• https://lists.suse.com/pipermail/sle-security-updates/2013-May/000464.html · Nota
• http://support.novell.com/security/cve/CVE-2012-2687.html · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=740045 · Nota
• https://bugzilla.novell.com/806458 · Nota
• https://bugzilla.novell.com/727993 · Nota
• https://suse.com/security/cve/CVE-2011-3368 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0021 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0883 · Nota de Segurança