CVE-2011-4317
Priority
Medium
Description
The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x
through 2.0.64, and 2.2.x through 2.2.21, when the Revision 1179239 patch
is in place, does not properly interact with use of (1) RewriteRule and (2)
ProxyPassMatch pattern matches for configuration of a reverse proxy, which
allows remote attackers to send requests to intranet servers via a
malformed URI containing an @ (at sign) character and a : (colon) character
in invalid positions. NOTE: this vulnerability exists because of an
incomplete fix for CVE-2011-3368.
through 2.0.64, and 2.2.x through 2.2.21, when the Revision 1179239 patch
is in place, does not properly interact with use of (1) RewriteRule and (2)
ProxyPassMatch pattern matches for configuration of a reverse proxy, which
allows remote attackers to send requests to intranet servers via a
malformed URI containing an @ (at sign) character and a : (colon) character
in invalid positions. NOTE: this vulnerability exists because of an
incomplete fix for CVE-2011-3368.
References
Notes
mdeslaur> the following commit introduces the apr_uri functionnality
mdeslaur> required for the vulnerability to work:
mdeslaur> http://svn.apache.org/viewvc?view=revision&revision=594624
mdeslaur> required for the vulnerability to work:
mdeslaur> http://svn.apache.org/viewvc?view=revision&revision=594624
Assigned-to
mdeslaur
Package
| Upstream: | needs-triage |
| Ubuntu 8.04 LTS (Hardy Heron): | released (2.2.8-1ubuntu0.23) |
| Ubuntu 10.04 LTS (Lucid Lynx): | released (2.2.14-5ubuntu8.8) |
| Ubuntu 11.04 (Natty Narwhal): | released (2.2.17-1ubuntu1.5) |
| Ubuntu 11.10 (Oneiric Ocelot): | released (2.2.20-1ubuntu1.2) |
| Ubuntu 12.04 LTS (Precise Pangolin): | not-affected (2.2.22-1ubuntu1) |
Patches:
| Upstream: | http://svn.apache.org/viewvc?view=revision&revision=1235443 |