CVE-2011-4317

Priority
Medium
Description
The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x
through 2.0.64, and 2.2.x through 2.2.21, when the Revision 1179239 patch
is in place, does not properly interact with use of (1) RewriteRule and (2)
ProxyPassMatch pattern matches for configuration of a reverse proxy, which
allows remote attackers to send requests to intranet servers via a
malformed URI containing an @ (at sign) character and a : (colon) character
in invalid positions. NOTE: this vulnerability exists because of an
incomplete fix for CVE-2011-3368.
References
Bugs
Notes
mdeslaur> the following commit introduces the apr_uri functionnality
mdeslaur> required for the vulnerability to work:
mdeslaur> http://svn.apache.org/viewvc?view=revision&revision=594624
Assigned-to
mdeslaur
Package
Upstream:needs-triage
Ubuntu 8.04 LTS (Hardy Heron):released (2.2.8-1ubuntu0.23)
Ubuntu 10.04 LTS (Lucid Lynx):released (2.2.14-5ubuntu8.8)
Ubuntu 11.04 (Natty Narwhal):released (2.2.17-1ubuntu1.5)
Ubuntu 11.10 (Oneiric Ocelot):released (2.2.20-1ubuntu1.2)
Ubuntu 12.04 LTS (Precise Pangolin):not-affected (2.2.22-1ubuntu1)
Patches:
Upstream:http://svn.apache.org/viewvc?view=revision&revision=1235443
More Information

Valid XHTML 1.0 Strict

Updated: 2012-06-01 15:22:32 UTC (commit 5347)