NVD

Id
10213  
Name
CVE-2011-3607  
Description
Integer overflow in the ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x through 2.2.21, when the mod_setenvif module is enabled, allows local users to gain privileges via a .htaccess file with a crafted SetEnvIf directive, in conjunction with a crafted HTTP request header, leading to a heap-based buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
4.4  
Severity
Medium  
CVSS Base Score
4.4  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-11-08  
Modified Date
2016-12-07  
Seq
2011-3607  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
58478 10213 CVE-2011-3607 20111102 Integer Overflow in Apache ap_pregsub via mod-setenvif  View
58479 10213 CVE-2011-3607 SSRT100877  View
58480 10213 CVE-2011-3607 APPLE-SA-2012-09-19-2  View
58481 10213 CVE-2011-3607 SSRT100823  View
58482 10213 CVE-2011-3607 SSRT100966  View
58483 10213 CVE-2011-3607 RHSA-2012:0128  View
58484 10213 CVE-2011-3607 1026267  View
58485 10213 CVE-2011-3607 http://support.apple.com/kb/HT5501  View
58486 10213 CVE-2011-3607 http://www.fujitsu.com/global/support/software/security/products-f/interstage-201303e.html  View
58487 10213 CVE-2011-3607 http://www.halfdog.net/Security/2011/ApacheModSetEnvIfIntegerOverflow/  View
58488 10213 CVE-2011-3607 http://www.halfdog.net/Security/2011/ApacheModSetEnvIfIntegerOverflow/DemoExploit.html  View
58489 10213 CVE-2011-3607 MDVSA-2012:003  View
58490 10213 CVE-2011-3607 MDVSA-2013:150  View
58491 10213 CVE-2011-3607 http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html  View
58492 10213 CVE-2011-3607 http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html  View
58493 10213 CVE-2011-3607 50494  View
58494 10213 CVE-2011-3607 apache-http-appregsub-bo(71093)  View
58495 10213 CVE-2011-3607 https://bugs.launchpad.net/ubuntu/+source/apache2/+bug/811422  View
58496 10213 CVE-2011-3607 https://bugzilla.redhat.com/show_bug.cgi?id=750935  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
32545 JVNDB-2011-002785 Apache HTTP Server における整数オーバーフローの脆弱性 Apache HTTP Server の server/util.c にある ap_pregsub 関数には、mod_setenvif モジュールが有効な場合、整数オーバーフローの脆弱性が存在します。 CVE-2011-3607 51514 CVE-2011-3607 10213 4.4 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002785.html 2011-11-08 2015-01-22 View