NVD

Id
10008  
Name
CVE-2011-3348  
Description
The mod_proxy_ajp module in the Apache HTTP Server before 2.2.21, when used with mod_proxy_balancer in certain configurations, allows remote attackers to cause a denial of service (temporary "error state" in the backend server) via a malformed HTTP request.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2011-09-20  
Modified Date
2013-11-15  
Seq
2011-3348  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
57345 10008 CVE-2011-3348 http://community.jboss.org/message/625307  View
57346 10008 CVE-2011-3348 http://httpd.apache.org/security/vulnerabilities_22.html#2.2.21  View
57347 10008 CVE-2011-3348 APPLE-SA-2012-02-01-1  View
57348 10008 CVE-2011-3348 HPSBUX02707  View
57349 10008 CVE-2011-3348 HPSBMU02704  View
57350 10008 CVE-2011-3348 oval:org.mitre.oval:def:14941  View
57351 10008 CVE-2011-3348 oval:org.mitre.oval:def:18154  View
57352 10008 CVE-2011-3348 http://support.apple.com/kb/HT5130  View
57353 10008 CVE-2011-3348 http://www.apache.org/dist/httpd/Announcement2.2.html  View
57354 10008 CVE-2011-3348 MDVSA-2011:168  View
57355 10008 CVE-2011-3348 http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html  View
57356 10008 CVE-2011-3348 RHSA-2011:1391  View
57357 10008 CVE-2011-3348 49616  View
57358 10008 CVE-2011-3348 1026054  View
57359 10008 CVE-2011-3348 apache-modproxyajp-dos(69804)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31998 JVNDB-2011-002238 Apache HTTP Server の mod_proxy_ajp モジュールにおけるサービス運用妨害 (DoS) の脆弱性 Apache HTTP Server の mod_proxy_ajp モジュールには、特定の設定で mod_proxy_balancer が使用される際、サービス運用妨害 (バックエンドサーバの一時的な"error state") 状態となる脆弱性が存在します。 CVE-2011-3348 51255 CVE-2011-3348 10008 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002238.html 2011-09-14 2013-07-18 View