NVD

Id
8804  
Name
CVE-2011-1928  
Description
The fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library 1.4.3 and 1.4.4, and the Apache HTTP Server 2.2.18, allows remote attackers to cause a denial of service (infinite loop) via a URI that does not match unspecified types of wildcard patterns, as demonstrated by attacks against mod_autoindex in httpd when a /*/WEB-INF/ configuration pattern is used. NOTE: this issue exists because of an incorrect fix for CVE-2011-0419.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2011-05-24  
Modified Date
2012-10-29  
Seq
2011-1928  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
50736 8804 CVE-2011-1928 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=627182  View
50737 8804 CVE-2011-1928 SUSE-SU-2011:1229  View
50738 8804 CVE-2011-1928 [httpd-announce] 20110519 Regressions in httpd 2.2.18, apr 1.4.4, and apr-util 1.3.11  View
50739 8804 CVE-2011-1928 [www-announce] 20110519 Regressions in httpd 2.2.18, apr 1.4.4, and apr-util 1.3.11  View
50740 8804 CVE-2011-1928 SSRT100966  View
50741 8804 CVE-2011-1928 [oss-security] 20110519 Re: CVE request: DoS in apr due to CVE-2011-0419 fix  View
50742 8804 CVE-2011-1928 [oss-security] 20110519 CVE request: DoS in apr due to CVE-2011-0419 fix  View
50743 8804 CVE-2011-1928 MDVSA-2011:095  View
50744 8804 CVE-2011-1928 RHSA-2011:0844  View
50745 8804 CVE-2011-1928 ADV-2011-1289  View
50746 8804 CVE-2011-1928 ADV-2011-1290  View
50747 8804 CVE-2011-1928 https://issues.apache.org/bugzilla/show_bug.cgi?id=51219  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31428 JVNDB-2011-001668 APR ライブラリおよび Apache HTTP Server の fnmatch 実装におけるサービス運用妨害 (無限ループ) の脆弱性 Apache Portable Runtime (APR) ライブラリおよび Apache HTTP Server の apr_fnmatch.c 内にある、fnmatch 実装には、サービス運用妨害 (無限ループ) 状態となる脆弱性が存在します。 CVE-2011-1928 49835 CVE-2011-1928 8804 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001668.html 2011-05-24 2012-11-28 View