CVE - CVE-2011-3348

CVE-ID
CVE-2011-3348	Learn more at National Vulnerability Database (NVD) • Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings
Description
The mod_proxy_ajp module in the Apache HTTP Server before 2.2.21, when used with mod_proxy_balancer in certain configurations, allows remote attackers to cause a denial of service (temporary "error state" in the backend server) via a malformed HTTP request.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:http://community.jboss.org/message/625307 CONFIRM:http://httpd.apache.org/security/vulnerabilities_22.html#2.2.21 CONFIRM:http://www.apache.org/dist/httpd/Announcement2.2.html CONFIRM:http://support.apple.com/kb/HT5130 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html APPLE:APPLE-SA-2012-02-01-1 URL:http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html HP:HPSBUX02707 URL:http://marc.info/?l=bugtraq&m=131731002122529&w=2 HP:SSRT100626 URL:http://marc.info/?l=bugtraq&m=131731002122529&w=2 HP:HPSBMU02704 URL:http://marc.info/?l=bugtraq&m=132033751509019&w=2 HP:SSRT100619 URL:http://marc.info/?l=bugtraq&m=132033751509019&w=2 MANDRIVA:MDVSA-2011:168 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2011:168 REDHAT:RHSA-2011:1391 URL:http://www.redhat.com/support/errata/RHSA-2011-1391.html REDHAT:RHSA-2012:0542 URL:http://rhn.redhat.com/errata/RHSA-2012-0542.html REDHAT:RHSA-2012:0543 URL:http://rhn.redhat.com/errata/RHSA-2012-0543.html BID:49616 URL:http://www.securityfocus.com/bid/49616 OVAL:oval:org.mitre.oval:def:14941 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14941 OVAL:oval:org.mitre.oval:def:18154 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18154 SECTRACK:1026054 URL:http://www.securitytracker.com/id?1026054 SECUNIA:46013 URL:http://secunia.com/advisories/46013 XF:apache-modproxyajp-dos(69804) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/69804
Assigning CNA
N/A
Date Entry Created
20110830	Disclaimer: The entry creation date may reflect when the CVE-ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20110830)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an entry on the CVE list, which standardizes names for security problems.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org