CVE

Id
53264  
CVE No.
CVE-2012-0021  
Status
Candidate  
Description
The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server 2.2.17 through 2.2.21, when a threaded MPM is used, does not properly handle a %{}C format string, which allows remote attackers to cause a denial of service (daemon crash) via a cookie that lacks both a name and a value.  
Phase
Assigned (20111207)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
562784 53264 CVE-2012-0021 CONFIRM:http://httpd.apache.org/security/vulnerabilities_22.html  View
562785 53264 CVE-2012-0021 CONFIRM:http://svn.apache.org/viewvc?view=revision&revision=1227292  View
562786 53264 CVE-2012-0021 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=785065  View
562787 53264 CVE-2012-0021 CONFIRM:https://issues.apache.org/bugzilla/show_bug.cgi?id=52256  View
562788 53264 CVE-2012-0021 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html  View
562789 53264 CVE-2012-0021 CONFIRM:http://support.apple.com/kb/HT5501  View
562790 53264 CVE-2012-0021 APPLE:APPLE-SA-2012-09-19-2  View
562791 53264 CVE-2012-0021 URL:http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html  View
562792 53264 CVE-2012-0021 HP:HPSBMU02786  View
562793 53264 CVE-2012-0021 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041  View
562794 53264 CVE-2012-0021 HP:SSRT100877  View
562795 53264 CVE-2012-0021 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041  View
562796 53264 CVE-2012-0021 HP:HPSBUX02761  View
562797 53264 CVE-2012-0021 URL:http://marc.info/?l=bugtraq&m=133494237717847&w=2  View
562798 53264 CVE-2012-0021 HP:SSRT100823  View
562799 53264 CVE-2012-0021 URL:http://marc.info/?l=bugtraq&m=133494237717847&w=2  View
562800 53264 CVE-2012-0021 MANDRIVA:MDVSA-2013:150  View
562801 53264 CVE-2012-0021 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2013:150  View
562802 53264 CVE-2012-0021 SECUNIA:48551  View

Related JVN