NVD

Id
43188  
Name
CVE-2012-1181  
Description
fcgid_spawn_ctl.c in the mod_fcgid module 2.3.6 for the Apache HTTP Server does not recognize the FcgidMaxProcessesPerClass directive for a virtual host, which makes it easier for remote attackers to cause a denial of service (memory consumption) via a series of HTTP requests that triggers a process count higher than the intended limit.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2012-03-19  
Modified Date
2012-09-07  
Seq
2012-1181  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
217482 43188 CVE-2012-1181 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=615814  View
217483 43188 CVE-2012-1181 DSA-2436  View
217484 43188 CVE-2012-1181 [oss-security] 20120315 CVE-request: apache"s mod-fcgid does not respect configured FcgidMaxProcessesPerClass in VirtualHost  View
217485 43188 CVE-2012-1181 [oss-security] 20120315 Re: CVE-request: apache"s mod-fcgid does not respect configured FcgidMaxProcessesPerClass in VirtualHost  View
217486 43188 CVE-2012-1181 52565  View
217487 43188 CVE-2012-1181 apache-modfcgid-dos(74181)  View
217488 43188 CVE-2012-1181 https://issues.apache.org/bugzilla/show_bug.cgi?id=49902  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26140 JVNDB-2012-001847 Apache HTTP Server の mod_fcgid モジュールにおけるサービス運用妨害 (メモリ消費) の脆弱性 Apache HTTP Server の mod_fcgid モジュール内の fcgid_spawn_ctl.c は、バーチャルホストに対する FcgidMaxProcessesPerClass ディレクティブを認識しないため、サービス運用妨害 (メモリ消費) 状態となる脆弱性が存在します。 CVE-2012-1181 54419 CVE-2012-1181 43188 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001847.html 2012-03-19 2012-09-14 View