CVE-2011-3368
published 2011-10-05CVE-2011-3368: The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1)…
PriorityP357medium5CVSS 2.0
AVNACLAuNCPINAN
EXPLOIT
EPSS
90.73%
99.8th percentile
The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an initial @ (at sign) character.
Affected
123 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
Detection & IOCsextracted from sources · hover to see the quote
- →Detect HTTP requests where the Request-URI contains an '@' (at sign) character at or near the beginning, which is the malformed URI pattern used to bypass mod_proxy reverse proxy controls and redirect requests to intranet servers. ↗
- →Monitor for HTTP 502 (Bad Gateway) responses from the Apache reverse proxy in response to requests containing '@' in the URI — the exploit PoC treats a 502 as a positive indicator of a successful bypass attempt (server attempted to proxy the request). ↗
- →The Metasploit scanner module (auxiliary/scanner/http/rewrite_proxy_bypass) detects vulnerable servers by forcing a request with an invalid domain name and checking for a 502 response as a bypass indicator; baseline status codes are compared to avoid false positives. ↗
- →CVE-2011-3639 and CVE-2011-4317 are incomplete-fix variants of this vulnerability; also inspect for URIs containing '@' combined with ':' in invalid positions (CVE-2011-4317) or HTTP/0.9 requests with '@' in the URI (CVE-2011-3639). ↗
- ·The vulnerability only affects Apache deployments where mod_proxy is configured with RewriteRule or ProxyPassMatch directives for reverse proxy use; servers not using these directives in a reverse proxy configuration are not exposed. ↗
- ·Red Hat Enterprise Linux 4 and 5 are not affected due to differences in apr-util's apr_uri_parse() implementation, so detection rules targeting those platforms may produce false negatives. ↗
- ·The Metasploit scanner warns that if the baseline status code already matches the test (502) status code, the injection attempt is skipped to avoid false positives; manual verification with VERBOSE mode is recommended. ↗
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
osv5.0MEDIUM
vendor_debian5.0MEDIUM
vendor_redhat5.0MEDIUM
vendor_ubuntu4.3MEDIUM
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-rqg3-pfxx-wwq3: The mod_proxy module in the Apache HTTP Server 2
ghsa_unreviewed·2022-05-14·CVSS 5.0
CVE-2011-3639 [MEDIUM] CWE-20 GHSA-rqg3-pfxx-wwq3: The mod_proxy module in the Apache HTTP Server 2
The mod_proxy module in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x before 2.2.18, when the Revision 1179239 patch is in place, does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers by using the HTTP/0.9 protocol with a malformed URI containing an initial @ (at sign) character. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-3368.
GHSA
GHSA-j85c-9w9v-p2p3: The mod_proxy module in the Apache HTTP Server 1
ghsa_unreviewed·2022-05-13
CVE-2011-3368 [MEDIUM] CWE-20 GHSA-j85c-9w9v-p2p3: The mod_proxy module in the Apache HTTP Server 1
The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an initial @ (at sign) character.
GHSA
GHSA-2m6p-rg3r-28gh: The mod_proxy module in the Apache HTTP Server 1
ghsa_unreviewed·2022-05-13·CVSS 5.0
CVE-2011-4317 [MEDIUM] CWE-20 GHSA-2m6p-rg3r-28gh: The mod_proxy module in the Apache HTTP Server 1
The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21, when the Revision 1179239 patch is in place, does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an @ (at sign) character and a : (colon) character in invalid positions. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-3368.
OSV
CVE-2011-3639: The mod_proxy module in the Apache HTTP Server 2
osv·2011-11-30·CVSS 5.0
CVE-2011-3639 [MEDIUM] CVE-2011-3639: The mod_proxy module in the Apache HTTP Server 2
The mod_proxy module in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x before 2.2.18, when the Revision 1179239 patch is in place, does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers by using the HTTP/0.9 protocol with a malformed URI containing an initial @ (at sign) character. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-3368.
OSV
CVE-2011-4317: The mod_proxy module in the Apache HTTP Server 1
osv·2011-11-30·CVSS 5.0
CVE-2011-4317 [MEDIUM] CVE-2011-4317: The mod_proxy module in the Apache HTTP Server 1
The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21, when the Revision 1179239 patch is in place, does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an @ (at sign) character and a : (colon) character in invalid positions. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-3368.
OSV
CVE-2011-3368: The mod_proxy module in the Apache HTTP Server 1
osv·2011-10-05·CVSS 5.0
CVE-2011-3368 [MEDIUM] CVE-2011-3368: The mod_proxy module in the Apache HTTP Server 1
The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an initial @ (at sign) character.
Red Hat
httpd: uri scheme bypass of the reverse proxy vulnerability CVE-2011-3368 fix
vendor_redhat·2011-11-23·CVSS 5.0
CVE-2011-4317 [MEDIUM] httpd: uri scheme bypass of the reverse proxy vulnerability CVE-2011-3368 fix
httpd: uri scheme bypass of the reverse proxy vulnerability CVE-2011-3368 fix
The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21, when the Revision 1179239 patch is in place, does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an @ (at sign) character and a : (colon) character in invalid positions. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-3368.
Statement: This issue did not affect the versions of httpd as shipped with Red Hat Enterprise Linux 4 and 5 due to differences in apr-util's apr_uri_parse() implementation.
P
Ubuntu
Apache vulnerabilities
vendor_ubuntu·2011-11-11·CVSS 4.3
CVE-2011-1176 [MEDIUM] Apache vulnerabilities
Title: Apache vulnerabilities
Summary: Multiple vulnerabilities and a regression were fixed in the Apache HTTP
server.
It was discovered that the mod_proxy module in Apache did not properly
interact with the RewriteRule and ProxyPassMatch pattern matches
in the configuration of a reverse proxy. This could allow remote
attackers to contact internal webservers behind the proxy that were
not intended for external exposure. (CVE-2011-3368)
Stefano Nichele discovered that the mod_proxy_ajp module in Apache when
used with mod_proxy_balancer in certain configurations could allow
remote attackers to cause a denial of service via a malformed HTTP
request. (CVE-2011-3348)
Samuel Montosa discovered that the ITK Multi-Processing Module for
Apache did not properly handle certain configuration secti
Red Hat
httpd: http 0.9 request bypass of the reverse proxy vulnerability CVE-2011-3368 fix
vendor_redhat·2011-10-26·CVSS 5.0
CVE-2011-3639 [MEDIUM] httpd: http 0.9 request bypass of the reverse proxy vulnerability CVE-2011-3368 fix
httpd: http 0.9 request bypass of the reverse proxy vulnerability CVE-2011-3368 fix
The mod_proxy module in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x before 2.2.18, when the Revision 1179239 patch is in place, does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers by using the HTTP/0.9 protocol with a malformed URI containing an initial @ (at sign) character. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-3368.
Package: httpd (Red Hat Directory Server 8) - Not affected
Package: httpd (Red Hat Enterprise Linux 4) - Will not fix
Package: httpd (Red Hat JBoss Enterprise Web Server 1) - Not affected
Red Hat
httpd: reverse web proxy vulnerability
vendor_redhat·2011-10-05·CVSS 5.0
CVE-2011-3368 [MEDIUM] httpd: reverse web proxy vulnerability
httpd: reverse web proxy vulnerability
The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an initial @ (at sign) character.
Package: httpd (Red Hat Directory Server 8) - Will not fix
Debian
CVE-2011-3368: apache2 - The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x throu...
vendor_debian·2011·CVSS 5.0
CVE-2011-3368 [MEDIUM] CVE-2011-3368: apache2 - The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x throu...
The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an initial @ (at sign) character.
Scope: local
bookworm: resolved (fixed in 2.2.21-2)
bullseye: resolved (fixed in 2.2.21-2)
forky: resolved (fixed in 2.2.21-2)
sid: resolved (fixed in 2.2.21-2)
trixie: resolved (fixed in 2.2.21-2)
Debian
CVE-2011-4317: apache2 - The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x throu...
vendor_debian·2011·CVSS 5.0
CVE-2011-4317 [MEDIUM] CVE-2011-4317: apache2 - The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x throu...
The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21, when the Revision 1179239 patch is in place, does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an @ (at sign) character and a : (colon) character in invalid positions. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-3368.
Scope: local
bookworm: resolved (fixed in 2.2.21-3)
bullseye: resolved (fixed in 2.2.21-3)
forky: resolved (fixed in 2.2.21-3)
sid: resolved (fixed in 2.2.21-3)
trixie: resolved (fixed in 2.2.21-3)
Debian
CVE-2011-3639: apache2 - The mod_proxy module in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x be...
vendor_debian·2011·CVSS 5.0
CVE-2011-3639 [MEDIUM] CVE-2011-3639: apache2 - The mod_proxy module in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x be...
The mod_proxy module in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x before 2.2.18, when the Revision 1179239 patch is in place, does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers by using the HTTP/0.9 protocol with a malformed URI containing an initial @ (at sign) character. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-3368.
Scope: local
bookworm: resolved (fixed in 2.2.18-1)
bullseye: resolved (fixed in 2.2.18-1)
forky: resolved (fixed in 2.2.18-1)
sid: resolved (fixed in 2.2.18-1)
trixie: resolved (fixed in 2.2.18-1)
No detection rules found.
Exploit-DB
Apache mod_proxy - Reverse Proxy Exposure
exploitdb·2011-10-11·CVSS 5.0
CVE-2011-3368 [MEDIUM] Apache mod_proxy - Reverse Proxy Exposure
Apache mod_proxy - Reverse Proxy Exposure
---
#!/usr/bin/env python
import socket
import string
import getopt, sys
known_ports = [0,21,22,23,25,53,69,80,110,137,139,443,445,3306,3389,5432,5900,8080]
def send_request(url, apache_target, apache_port, internal_target, internal_port, resource):
get = "GET " + url + "@" + internal_target + ":" + internal_port + "/" + resource + " HTTP/1.1\r\n"
get = get + "Host: " + apache_target + "\r\n\r\n"
remoteserver = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
remoteserver.settimeout(3)
try:
remoteserver.connect((apache_target, int(apache_port)))
remoteserver.send(get)
return remoteserver.recv(4096)
except:
return ""
def get_banner(result):
return result[string.find(result, "\r\n\r\n")+4:]
def scan_host(url, apache_target, apache_port,
Metasploit
Apache Reverse Proxy Bypass Vulnerability Scanner
metasploit
Apache Reverse Proxy Bypass Vulnerability Scanner
Apache Reverse Proxy Bypass Vulnerability Scanner
Scan for poorly configured reverse proxy servers. By default, this module attempts to force the server to make a request with an invalid domain name. Then, if the bypass is successful, the server will look it up and of course fail, then responding with a status code 502. A baseline status code is always established and if that baseline matches your test status code, the injection attempt does not occur. "set VERBOSE true" if you are paranoid and want to catch potential false negatives. Works best against Apache and mod_rewrite
HackerOne
Out-of-date Version (Apache)
hackerone·2019-12-02·CVSS 5.0
[MEDIUM] Out-of-date Version (Apache)
Out-of-date Version (Apache)
URL https://████████/
Identified Version 2.2.15 (contains 4 important and 10 other vulnerabilities)
Latest Version 2.2.31
Vulnerability Database Result is based on 27.10.2016 vulnerability database content.
Vulnerability Details
Link identified you are using an out-of-date version of Apache.
Impact
Since this is an old version of the software, it may be vulnerable to attacks.
Remedy
Please upgrade your installation of Apache to the latest stable version.
Remedy References
•Downloading the Apache HTTP Server
Known Vulnerabilities in this Version
Medium Apache mod_cache and mod_dav Request Handling Denial of Service Vulnerability
The mod_cache and mod_dav modules in the Apache HTTP Server allow remote attackers to cause a denial of service (process
Bugzilla
CVE-2011-3368 CVE-2012-0053 CVE-2012-0031 CVE-2012-0021 CVE-2011-3607 httpd: multiple vulnerabilities [fedora-all]
bugzilla·2012-01-27·CVSS 5.0
CVE-2011-3368 [MEDIUM] CVE-2011-3368 CVE-2012-0053 CVE-2012-0031 CVE-2012-0021 CVE-2011-3607 httpd: multiple vulnerabilities [fedora-all]
CVE-2011-3368 CVE-2012-0053 CVE-2012-0031 CVE-2012-0021 CVE-2011-3607 httpd: multiple vulnerabilities [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected Fedora
versions.
For comments that are specific to the vulnerability please use bugs filed
against "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please include this bug ID and the
bug IDs of this bug's parent bugs filed against the "Security Response"
product (the top-level CVE bugs). Please mention the CVE IDs being fixed
in the RPM changelog when available.
Bodhi update submission link:
https://admin.fedora
Bugzilla
CVE-2011-4317 httpd: uri scheme bypass of the reverse proxy vulnerability CVE-2011-3368 fix
bugzilla·2011-11-23·CVSS 5.0
CVE-2011-4317 [MEDIUM] CVE-2011-4317 httpd: uri scheme bypass of the reverse proxy vulnerability CVE-2011-3368 fix
CVE-2011-4317 httpd: uri scheme bypass of the reverse proxy vulnerability CVE-2011-3368 fix
Additional problems were discovered in the httpd fix for CVE-2011-3368 - a reverse proxy bypass flaw - tracked via bug #740045. Upstream mailing list post identifies following request forms, which are not handled correctly:
GET @localhost::8880 HTTP/1.0\r\n\r\n
GET qualys:@qqq.qq.qualys.com HTTP/1.0\r\n\r\n
Reference:
http://thread.gmane.org/gmane.comp.apache.devel/46440
Discussion:
External References:
https://community.qualys.com/blogs/securitylabs/2011/11/23/apache-reverse-proxy-bypass-issue
---
Well,
If I try this with a similar setup and post the request forms, I always get an error stating that the request-URI is invalid:
[Mon Nov 28 13:57:34 2011] [error] [client a.b.c.d] invalid req
Bugzilla
CVE-2011-3639 httpd: http 0.9 request bypass of the reverse proxy vulnerability CVE-2011-3368 fix
bugzilla·2011-11-08·CVSS 5.0
CVE-2011-3639 [MEDIUM] CVE-2011-3639 httpd: http 0.9 request bypass of the reverse proxy vulnerability CVE-2011-3368 fix
CVE-2011-3639 httpd: http 0.9 request bypass of the reverse proxy vulnerability CVE-2011-3368 fix
SUSE reported that upstream patch for CVE-2011-3368 (bug #740045), when applied to httpd versions before 2.2.18, does not completely address the issue, when attacker sends HTTP 0.9 requests::
https://bugzilla.novell.com/show_bug.cgi?id=722545#c15
http://thread.gmane.org/gmane.comp.apache.devel/45978
http://thread.gmane.org/gmane.comp.security.oss.general/6102
The fix has been created upstream and committed to trunk:
http://thread.gmane.org/gmane.comp.apache.devel/45978/focus=45979
http://svn.apache.org/viewvc?view=revision&revision=1188745
Upstream also confirmed this additional fix is not required for httpd versions 2.2.18 and later:
http://thread.gmane.org/gmane.comp.apache.devel/45978
Bugzilla
CVE-2011-3368 httpd: reverse web proxy vulnerability [fedora-all]
bugzilla·2011-10-05·CVSS 5.0
CVE-2011-3368 [MEDIUM] CVE-2011-3368 httpd: reverse web proxy vulnerability [fedora-all]
CVE-2011-3368 httpd: reverse web proxy vulnerability [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected Fedora
versions.
For comments that are specific to the vulnerability please use bugs filed
against "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please include the bug IDs of the
respective parent bugs filed against the "Security Response" product.
Please mention CVE ids in the RPM changelog when available.
Bodhi update submission link:
https://admin.fedoraproject.org/updates/new/?type_=security&bugs=740045
Please note: this issue affects multiple supporte
Bugzilla
CVE-2011-3368 httpd: reverse web proxy vulnerability
bugzilla·2011-09-20·CVSS 5.0
CVE-2011-3368 [MEDIUM] CVE-2011-3368 httpd: reverse web proxy vulnerability
CVE-2011-3368 httpd: reverse web proxy vulnerability
RMDG partner and independent security consultancy, "Context Information
Security" has made CPNI Response aware of a security vulnerability which
could potentially allow an attacker to gain full internal access to a
network from the internet.
The technique exploits insecurely configured reverse web proxies to gain
access to internal/DMZ systems.
This attack is based on an Apache web server which is using "mod_rewrite"
to proxy web requests internally. Other proxies may suffer from this
issue.
The vulnerability occurs if the Apache configuration file is configured
like this:
RewriteRule ^(.*) http://internalserver:80$1 [P]
As opposed to:
RewriteRule ^(.*) http://internalserver:80/$1 [P]
It is important for readers to review their
http://kb.juniper.net/JSA10585http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-11/msg00011.htmlhttp://lists.opensuse.org/opensuse-updates/2013-02/msg00009.htmlhttp://lists.opensuse.org/opensuse-updates/2013-02/msg00012.htmlhttp://marc.info/?l=bugtraq&m=133294460209056&w=2http://marc.info/?l=bugtraq&m=134987041210674&w=2http://osvdb.org/76079http://rhn.redhat.com/errata/RHSA-2012-0542.htmlhttp://rhn.redhat.com/errata/RHSA-2012-0543.htmlhttp://seclists.org/fulldisclosure/2011/Oct/232http://seclists.org/fulldisclosure/2011/Oct/273http://secunia.com/advisories/46288http://secunia.com/advisories/46414http://secunia.com/advisories/48551http://support.apple.com/kb/HT5501http://svn.apache.org/viewvc?view=revision&revision=1179239http://web.archiveorange.com/archive/v/ZyS0hzECD5zzb2NkvQlthttp://www-01.ibm.com/support/docview.wss?uid=nas2064c7e5f53452ff686257927003c8d42http://www-01.ibm.com/support/docview.wss?uid=nas2b7c57b1f1035675186257927003c8d48http://www.contextis.com/research/blog/reverseproxybypass/http://www.debian.org/security/2012/dsa-2405http://www.exploit-db.com/exploits/17969http://www.mandriva.com/security/advisories?name=MDVSA-2011:144http://www.mandriva.com/security/advisories?name=MDVSA-2013:150http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.htmlhttp://www.oracle.com/technetwork/topics/security/cpujul2012-392727.htmlhttp://www.redhat.com/support/errata/RHSA-2011-1391.htmlhttp://www.redhat.com/support/errata/RHSA-2011-1392.htmlhttp://www.securityfocus.com/bid/49957http://www.securitytracker.com/id?1026144https://bugzilla.redhat.com/show_bug.cgi?id=740045https://exchange.xforce.ibmcloud.com/vulnerabilities/70336https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r064df0985779b7ee044d3120d71ba59750427cf53f57ba3384e3773f%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r1d201e3da31a2c8aa870c8314623caef7debd74a13d0f25205e26f15%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r688df6f16f141e966a0a47f817e559312b3da27886f59116a94b273d%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/re2e23465bbdb17ffe109d21b4f192e6b58221cd7aa8797d530b4cd75%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3Ehttp://kb.juniper.net/JSA10585http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-11/msg00011.htmlhttp://lists.opensuse.org/opensuse-updates/2013-02/msg00009.htmlhttp://lists.opensuse.org/opensuse-updates/2013-02/msg00012.htmlhttp://marc.info/?l=bugtraq&m=133294460209056&w=2http://marc.info/?l=bugtraq&m=134987041210674&w=2http://osvdb.org/76079http://rhn.redhat.com/errata/RHSA-2012-0542.htmlhttp://rhn.redhat.com/errata/RHSA-2012-0543.htmlhttp://seclists.org/fulldisclosure/2011/Oct/232http://seclists.org/fulldisclosure/2011/Oct/273http://secunia.com/advisories/46288http://secunia.com/advisories/46414http://secunia.com/advisories/48551http://support.apple.com/kb/HT5501http://svn.apache.org/viewvc?view=revision&revision=1179239http://web.archiveorange.com/archive/v/ZyS0hzECD5zzb2NkvQlthttp://www-01.ibm.com/support/docview.wss?uid=nas2064c7e5f53452ff686257927003c8d42http://www-01.ibm.com/support/docview.wss?uid=nas2b7c57b1f1035675186257927003c8d48http://www.contextis.com/research/blog/reverseproxybypass/http://www.debian.org/security/2012/dsa-2405http://www.exploit-db.com/exploits/17969http://www.mandriva.com/security/advisories?name=MDVSA-2011:144http://www.mandriva.com/security/advisories?name=MDVSA-2013:150http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.htmlhttp://www.oracle.com/technetwork/topics/security/cpujul2012-392727.htmlhttp://www.redhat.com/support/errata/RHSA-2011-1391.htmlhttp://www.redhat.com/support/errata/RHSA-2011-1392.htmlhttp://www.securityfocus.com/bid/49957http://www.securitytracker.com/id?1026144https://bugzilla.redhat.com/show_bug.cgi?id=740045https://exchange.xforce.ibmcloud.com/vulnerabilities/70336https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r064df0985779b7ee044d3120d71ba59750427cf53f57ba3384e3773f%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r1d201e3da31a2c8aa870c8314623caef7debd74a13d0f25205e26f15%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r688df6f16f141e966a0a47f817e559312b3da27886f59116a94b273d%40%3Ccvs.httpd.apache.org%3E
+ 10 more references
2011-10-05
Published