PT-2012-2266 · Apache+4 · Apache Http Server+4

Publicado 2012-01-23 · Atualizado 2024-06-15 · CVE-2012-0053

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.2.x through 2.2.21

Description The issue allows remote attackers to obtain the values of HTTPOnly cookies via vectors involving a long or malformed header in conjunction with crafted web script, specifically when the server constructs Bad Request (400) error documents without proper restriction of header information. This flaw could be used by an attacker to expose "httpOnly" cookies when no custom ErrorDocument is specified.

Recommendations For Apache HTTP Server versions 2.2.x through 2.2.21, consider specifying a custom ErrorDocument for status code 400 to prevent exposure of "httpOnly" cookies. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CESA-2012_0128

CVE-2012-0053

DSA-2405-1

HPSBUX02761

OPENSUSE-SU-2024:10268-1

RHSA-2012:0128

RHSA-2012:0323

RHSA-2012:0542

RHSA-2012_0128

RHSA-2012_0323

Produtos afetados

Apache Http Server

Centos

Hp-Ux

Red Hat

Suse

Referências · 149

• 🔥 https://exploit-db.com/exploits/18442 · Exploit
• https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9@%3Ccvs.httpd.apache.org%3E · Nota
• https://suse.com/security/cve/CVE-2009-3095 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3639 · Nota de Segurança
• http://rhn.redhat.com/errata/RHSA-2012-0543.html · Aviso do Fabricante
• https://lists.centos.org/pipermail/centos-announce/2012-February/055352.html · Nota
• http://secunia.com/advisories/48551 · Nota
• https://suse.com/security/cve/CVE-2014-3583 · Nota
• https://suse.com/security/cve/CVE-2014-0118 · Nota
• https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f@%3Ccvs.httpd.apache.org%3E · Nota
• http://kb.juniper.net/JSA10585 · Nota
• https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f@%3Ccvs.httpd.apache.org%3E · Nota
• https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E · Nota
• https://community.qualys.com/blogs/securitylabs/2011/11/23/apache-reverse-proxy-bypass-issue · Nota
• https://access.redhat.com/security/cve/CVE-2012-0031 · Nota