PT-2011-4400 · Apache+2 · Apache Http Server+2

Maksymilian Arciemowicz · Published 2011-09-14 · Updated 2022-09-19 · CVE-2011-3348

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions prior to 2.2.21

Description The issue arises when the mod proxy ajp module is used in conjunction with mod proxy balancer in specific configurations, allowing remote attackers to cause a temporary denial of service in the backend server. This can be achieved by sending certain malformed HTTP requests, which puts the backend server into an error state until the retry timeout expires.

Recommendations For Apache HTTP Server versions prior to 2.2.21, update to version 2.2.21 or later to resolve the issue. As a temporary workaround, consider restricting the use of the mod proxy ajp module when used with mod proxy balancer to minimize the risk of exploitation.

Exploit

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2011-3348

HPSBUX02707

RHSA-2011:1391

RHSA-2011_1391

RHSA-2012:0542

Affected Products

Apache Http Server

Hp-Ux

Red Hat

References · 70

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/apache_range_dos.rb · Exploit
• 🔥 https://github.com/limkokholefork/CVE-2011-3192 · Exploit
• 🔥 http://community.jboss.org/message/625307 · Exploit
• http://rhn.redhat.com/errata/RHSA-2012-0543.html · Vendor Advisory
• http://marc.info/?l=bugtraq&m=131731002122529&w=2 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2011:168 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-3192 · Security Note
• http://rhn.redhat.com/errata/RHSA-2012-0542.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2011-1391.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0419 · Security Note
• http://secunia.com/advisories/46013 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3348 · Security Note
• http://httpd.apache.org/security/vulnerabilities_22.html#2.2.21 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=132033751509019&w=2 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3192 · Security Note