CVE-2012-0021
published 2012-01-28CVE-2012-0021: The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server 2.2.17 through 2.2.21, when a threaded MPM is used, does not…
PriorityP427low2.6CVSS 2.0
AVNACHAuNCNINAP
EPSS
30.81%
98.0th percentile
The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server 2.2.17 through 2.2.21, when a threaded MPM is used, does not properly handle a %{}C format string, which allows remote attackers to cause a denial of service (daemon crash) via a cookie that lacks both a name and a value.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| debian | apache2 | < apache2 2.2.22-1 (bookworm) | apache2 2.2.22-1 (bookworm) |
CVSS provenance
nvdv2.02.6LOWAV:N/AC:H/Au:N/C:N/I:N/A:P
osv2.6LOW
vendor_ubuntu4.4MEDIUM
vendor_debian2.6LOW
vendor_redhat2.6LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Apache HTTP Server vulnerabilities
vendor_ubuntu·2012-02-16·CVSS 4.4
CVE-2011-3607 [MEDIUM] Apache HTTP Server vulnerabilities
Title: Apache HTTP Server vulnerabilities
Summary: Several security issues were fixed in the Apache HTTP Server.
It was discovered that the Apache HTTP Server incorrectly handled the
SetEnvIf .htaccess file directive. An attacker having write access to a
.htaccess file may exploit this to possibly execute arbitrary code.
(CVE-2011-3607)
Prutha Parikh discovered that the mod_proxy module did not properly
interact with the RewriteRule and ProxyPassMatch pattern matches in the
configuration of a reverse proxy. This could allow remote attackers to
contact internal webservers behind the proxy that were not intended for
external exposure. (CVE-2011-4317)
Rainer Canavan discovered that the mod_log_config module incorrectly
handled a certain format string when used with a threaded MPM. A remot
Debian
CVE-2012-0021: apache2 - The log_cookie function in mod_log_config.c in the mod_log_config module in the ...
vendor_debian·2012·CVSS 2.6
CVE-2012-0021 [LOW] CVE-2012-0021: apache2 - The log_cookie function in mod_log_config.c in the mod_log_config module in the ...
The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server 2.2.17 through 2.2.21, when a threaded MPM is used, does not properly handle a %{}C format string, which allows remote attackers to cause a denial of service (daemon crash) via a cookie that lacks both a name and a value.
Scope: local
bookworm: resolved (fixed in 2.2.22-1)
bullseye: resolved (fixed in 2.2.22-1)
forky: resolved (fixed in 2.2.22-1)
sid: resolved (fixed in 2.2.22-1)
trixie: resolved (fixed in 2.2.22-1)
Red Hat
httpd: NULL pointer dereference crash in mod_log_config
vendor_redhat·2011-11-28·CVSS 2.6
CVE-2012-0021 [LOW] CWE-476 httpd: NULL pointer dereference crash in mod_log_config
httpd: NULL pointer dereference crash in mod_log_config
The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server 2.2.17 through 2.2.21, when a threaded MPM is used, does not properly handle a %{}C format string, which allows remote attackers to cause a denial of service (daemon crash) via a cookie that lacks both a name and a value.
Statement: Not vulnerable. This issue did not affect the versions of httpd as shipped with Red Hat Enterprise Linux 4, 5, or 6.
Package: httpd (Red Hat Enterprise Linux 4) - Not affected
Package: httpd (Red Hat Enterprise Linux 5) - Not affected
Package: httpd (Red Hat Enterprise Linux 6) - Not affected
GHSA
GHSA-mq76-p4cp-m2vg: The log_cookie function in mod_log_config
ghsa_unreviewed·2022-05-04
CVE-2012-0021 [LOW] CWE-20 GHSA-mq76-p4cp-m2vg: The log_cookie function in mod_log_config
The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server 2.2.17 through 2.2.21, when a threaded MPM is used, does not properly handle a %{}C format string, which allows remote attackers to cause a denial of service (daemon crash) via a cookie that lacks both a name and a value.
OSV
CVE-2012-0021: The log_cookie function in mod_log_config
osv·2012-01-28·CVSS 2.6
CVE-2012-0021 [LOW] CVE-2012-0021: The log_cookie function in mod_log_config
The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server 2.2.17 through 2.2.21, when a threaded MPM is used, does not properly handle a %{}C format string, which allows remote attackers to cause a denial of service (daemon crash) via a cookie that lacks both a name and a value.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2011-3368 CVE-2012-0053 CVE-2012-0031 CVE-2012-0021 CVE-2011-3607 httpd: multiple vulnerabilities [fedora-all]
bugzilla·2012-01-27·CVSS 5.0
CVE-2011-3368 [MEDIUM] CVE-2011-3368 CVE-2012-0053 CVE-2012-0031 CVE-2012-0021 CVE-2011-3607 httpd: multiple vulnerabilities [fedora-all]
CVE-2011-3368 CVE-2012-0053 CVE-2012-0031 CVE-2012-0021 CVE-2011-3607 httpd: multiple vulnerabilities [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected Fedora
versions.
For comments that are specific to the vulnerability please use bugs filed
against "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please include this bug ID and the
bug IDs of this bug's parent bugs filed against the "Security Response"
product (the top-level CVE bugs). Please mention the CVE IDs being fixed
in the RPM changelog when available.
Bodhi update submission link:
https://admin.fedora
Bugzilla
CVE-2012-0021 httpd: crash in mod_log_config [fedora-all]
bugzilla·2012-01-27·CVSS 2.6
CVE-2012-0021 [LOW] CVE-2012-0021 httpd: crash in mod_log_config [fedora-all]
CVE-2012-0021 httpd: crash in mod_log_config [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected Fedora
versions.
For comments that are specific to the vulnerability please use bugs filed
against "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please include this bug ID and the
bug IDs of this bug's parent bugs filed against the "Security Response"
product (the top-level CVE bugs). Please mention the CVE IDs being fixed
in the RPM changelog when available.
Bodhi update submission link:
https://admin.fedoraproject.org/updates/new/?type_=security&bugs=785065
Plea
Bugzilla
CVE-2012-0021 httpd: NULL pointer dereference crash in mod_log_config
bugzilla·2012-01-27·CVSS 2.6
CVE-2012-0021 [LOW] CVE-2012-0021 httpd: NULL pointer dereference crash in mod_log_config
CVE-2012-0021 httpd: NULL pointer dereference crash in mod_log_config
A flaw [1] was found in mod_log_config. If an administrator configured the "%{cookiename}C" log format string to be used, a remote attacker could send a specific cookie which would cause a crash. This crash would only be a denial of service if using a threaded MPM (such as event or worker). Note that Red Hat Enterprise Linux and Fedora use the prefork MPM by default.
This will be fixed upstream [2] in 2.2.22 and affects versions 2.2.17 up to and including 2.2.21.
[1] https://issues.apache.org/bugzilla/show_bug.cgi?id=52256
[2] http://svn.apache.org/viewvc?view=revision&revision=1227292
Statement:
Not vulnerable. This issue did not affect the versions of httpd as shipped with Red Hat Enterprise Linux 4, 5, or 6.
D
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041http://httpd.apache.org/security/vulnerabilities_22.htmlhttp://lists.apple.com/archives/security-announce/2012/Sep/msg00004.htmlhttp://marc.info/?l=bugtraq&m=133294460209056&w=2http://marc.info/?l=bugtraq&m=133494237717847&w=2http://rhn.redhat.com/errata/RHSA-2012-0542.htmlhttp://rhn.redhat.com/errata/RHSA-2012-0543.htmlhttp://secunia.com/advisories/48551http://support.apple.com/kb/HT5501http://svn.apache.org/viewvc?view=revision&revision=1227292http://www.mandriva.com/security/advisories?name=MDVSA-2012:012http://www.mandriva.com/security/advisories?name=MDVSA-2013:150http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=785065https://issues.apache.org/bugzilla/show_bug.cgi?id=52256https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r05b5357d1f6bd106f41541ee7d87aafe3f5ea4dc3e9bde5ce09baff8%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r1d201e3da31a2c8aa870c8314623caef7debd74a13d0f25205e26f15%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r9b4b963760a3cb5a4a70c902f325c6c0337fe51d5b8570416f8f8729%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3Ehttp://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041http://httpd.apache.org/security/vulnerabilities_22.htmlhttp://lists.apple.com/archives/security-announce/2012/Sep/msg00004.htmlhttp://marc.info/?l=bugtraq&m=133294460209056&w=2http://marc.info/?l=bugtraq&m=133494237717847&w=2http://rhn.redhat.com/errata/RHSA-2012-0542.htmlhttp://rhn.redhat.com/errata/RHSA-2012-0543.htmlhttp://secunia.com/advisories/48551http://support.apple.com/kb/HT5501http://svn.apache.org/viewvc?view=revision&revision=1227292http://www.mandriva.com/security/advisories?name=MDVSA-2012:012http://www.mandriva.com/security/advisories?name=MDVSA-2013:150http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=785065https://issues.apache.org/bugzilla/show_bug.cgi?id=52256https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r05b5357d1f6bd106f41541ee7d87aafe3f5ea4dc3e9bde5ce09baff8%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r1d201e3da31a2c8aa870c8314623caef7debd74a13d0f25205e26f15%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r9b4b963760a3cb5a4a70c902f325c6c0337fe51d5b8570416f8f8729%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E
2012-01-28
Published