NVD

Id
10023  
Name
CVE-2011-3368  
Description
The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an initial @ (at sign) character.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2011-10-05  
Modified Date
2016-06-16  
Seq
2011-3368  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
57466 10023 CVE-2011-3368 http://kb.juniper.net/JSA10585  View
57467 10023 CVE-2011-3368 APPLE-SA-2012-09-19-2  View
57468 10023 CVE-2011-3368 SUSE-SU-2011:1229  View
57469 10023 CVE-2011-3368 openSUSE-SU-2013:0243  View
57470 10023 CVE-2011-3368 openSUSE-SU-2013:0248  View
57471 10023 CVE-2011-3368 SSRT100966  View
57472 10023 CVE-2011-3368 20111005 Apache HTTP Server: mod_proxy reverse proxy exposure (CVE-2011-3368)  View
57473 10023 CVE-2011-3368 20111005 Context IS Advisory - Apache Reverse Proxy Bypass Vulnerability  View
57474 10023 CVE-2011-3368 http://support.apple.com/kb/HT5501  View
57475 10023 CVE-2011-3368 http://svn.apache.org/viewvc?view=revision&revision=1179239  View
57476 10023 CVE-2011-3368 [announce] 20111005 Advisory: mod_proxy reverse proxy exposure (CVE-2011-3368)  View
57477 10023 CVE-2011-3368 SE49723  View
57478 10023 CVE-2011-3368 SE49724  View
57479 10023 CVE-2011-3368 http://www.contextis.com/research/blog/reverseproxybypass/  View
57480 10023 CVE-2011-3368 17969  View
57481 10023 CVE-2011-3368 MDVSA-2011:144  View
57482 10023 CVE-2011-3368 MDVSA-2013:150  View
57483 10023 CVE-2011-3368 http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html  View
57484 10023 CVE-2011-3368 http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html  View
57485 10023 CVE-2011-3368 RHSA-2011:1391  View
57486 10023 CVE-2011-3368 RHSA-2011:1392  View
57487 10023 CVE-2011-3368 49957  View
57488 10023 CVE-2011-3368 1026144  View
57489 10023 CVE-2011-3368 apache-modproxy-information-disclosure(70336)  View
57490 10023 CVE-2011-3368 https://bugzilla.redhat.com/show_bug.cgi?id=740045  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
32111 JVNDB-2011-002351 Apache HTTP Server の mod_proxy モジュールにおけるイントラネットサーバにリクエストを送信される脆弱性 Apache HTTP Server の mod_proxy モジュールは、RewriteRule および ProxyPassMatch パターンマッチを適切に処理しないため、イントラネットサーバにリクエストを送信される脆弱性が存在します。 CVE-2011-3368 51275 CVE-2011-3368 10023 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002351.html 2011-10-05 2015-01-22 View