Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2011-3607 — Integer Overflow or Wraparound in Apache Http Server

CWE-189CWE-190 — Integer Overflow or Wraparound12 documents9 sources
Severity
4.4MEDIUMNVD
EPSS
0.2%
top 52.49%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Apache Http Server
Timeline
PublishedNov 8
Latest updateMay 13

Description

Integer overflow in the ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x through 2.2.21, when the mod_setenvif module is enabled, allows local users to gain privileges via a .htaccess file with a crafted SetEnvIf directive, in conjunction with a crafted HTTP request header, leading to a heap-based buffer overflow.

CVSS vector

AV:L/AC:M/C:P/I:P/A:PExploitability: 3.4 | Impact: 6.4

Affected Packages1 packages

â–¶NVDapache/http_server53 versions+52

🔴Vulnerability Details

3
GHSA
GHSA-chqj-ghv5-hm5m: Integer overflow in the ap_pregsub function in server/util↗2022-05-13
â–¶
CVEList
CVE-2011-3607: Integer overflow in the ap_pregsub function in server/util↗2011-11-08
â–¶
OSV
CVE-2011-3607: Integer overflow in the ap_pregsub function in server/util↗2011-11-08
â–¶

💥Exploits & PoCs

1
Exploit-DB
Apache < 2.0.64 / < 2.2.21 mod_setenvif - Integer Overflow↗2011-11-02
â–¶

📋Vendor Advisories

4
Ubuntu
Apache HTTP Server vulnerabilities↗2012-02-16
â–¶
Red Hat
httpd: ap_pregsub Integer overflow to buffer overflow↗2011-11-02
â–¶
Red Hat
httpd: SetEnvIf resource exhaustion↗2011-11-02
â–¶
Debian
CVE-2011-3607: apache2 - Integer overflow in the ap_pregsub function in server/util.c in the Apache HTTP ...↗2011
â–¶

💬Community

3
Bugzilla
CVE-2011-3368 CVE-2012-0053 CVE-2012-0031 CVE-2012-0021 CVE-2011-3607 httpd: multiple vulnerabilities [fedora-all]↗2012-01-27
â–¶
Bugzilla
CVE-2011-3607 httpd: ap_pregsub Integer overflow to buffer overflow↗2011-12-22
â–¶
Bugzilla
CVE-2011-3607 httpd: ap_pregsub Integer overflow to buffer overflow [fedora-all]↗2011-11-02
â–¶
CVE-2011-3607 — Integer Overflow or Wraparound | cvebase