CVE

Id
52229  
CVE No.
CVE-2011-4317  
Status
Candidate  
Description
The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21, when the Revision 1179239 patch is in place, does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an @ (at sign) character and a : (colon) character in invalid positions. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-3368.  
Phase
Assigned (20111104)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
558067 52229 CVE-2011-4317 MISC:https://community.qualys.com/blogs/securitylabs/2011/11/23/apache-reverse-proxy-bypass-issue  View
558068 52229 CVE-2011-4317 CONFIRM:http://thread.gmane.org/gmane.comp.apache.devel/46440  View
558069 52229 CVE-2011-4317 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=756483  View
558070 52229 CVE-2011-4317 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html  View
558071 52229 CVE-2011-4317 CONFIRM:http://support.apple.com/kb/HT5501  View
558072 52229 CVE-2011-4317 CONFIRM:http://kb.juniper.net/JSA10585  View
558073 52229 CVE-2011-4317 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html  View
558074 52229 CVE-2011-4317 APPLE:APPLE-SA-2012-09-19-2  View
558075 52229 CVE-2011-4317 URL:http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html  View
558076 52229 CVE-2011-4317 HP:HPSBMU02786  View
558077 52229 CVE-2011-4317 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041  View
558078 52229 CVE-2011-4317 HP:SSRT100877  View
558079 52229 CVE-2011-4317 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041  View
558080 52229 CVE-2011-4317 HP:HPSBOV02822  View
558081 52229 CVE-2011-4317 URL:http://marc.info/?l=bugtraq&m=134987041210674&w=2  View
558082 52229 CVE-2011-4317 HP:SSRT100966  View
558083 52229 CVE-2011-4317 URL:http://marc.info/?l=bugtraq&m=134987041210674&w=2  View
558084 52229 CVE-2011-4317 MANDRIVA:MDVSA-2012:003  View
558085 52229 CVE-2011-4317 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2012:003  View
558086 52229 CVE-2011-4317 MANDRIVA:MDVSA-2013:150  View
558087 52229 CVE-2011-4317 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2013:150  View
558088 52229 CVE-2011-4317 REDHAT:RHSA-2012:0128  View
558089 52229 CVE-2011-4317 URL:http://rhn.redhat.com/errata/RHSA-2012-0128.html  View
558090 52229 CVE-2011-4317 SUSE:openSUSE-SU-2013:0243  View
558091 52229 CVE-2011-4317 URL:http://lists.opensuse.org/opensuse-updates/2013-02/msg00009.html  View
558092 52229 CVE-2011-4317 SUSE:openSUSE-SU-2013:0248  View
558093 52229 CVE-2011-4317 URL:http://lists.opensuse.org/opensuse-updates/2013-02/msg00012.html  View
558094 52229 CVE-2011-4317 SECTRACK:1026353  View
558095 52229 CVE-2011-4317 URL:http://www.securitytracker.com/id?1026353  View
558096 52229 CVE-2011-4317 SECUNIA:48551  View

Related JVN