5 - CVE-2011-3368

Executive Summary

Informations
Name	CVE-2011-3368	First vendor Publication	2011-10-05
Vendor	Cve	Last vendor Modification	2023-11-07

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:P/I:N/A:N)
Cvss Base Score	5	Attack Range	Network
Cvss Impact Score	2.9	Attack Complexity	Low
Cvss Expoit Score	10	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an initial @ (at sign) character.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3368

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-20	Improper Input Validation

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:21452

Oval ID:	oval:org.mitre.oval:def:21452
Title:	RHSA-2011:1391: httpd security and bug fix update (Moderate)
Description:	The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an initial @ (at sign) character.
Family:	unix	Class:	patch
Reference(s):	RHSA-2011:1391-01 CVE-2011-3348 CVE-2011-3368	Version:	29
Platform(s):	Red Hat Enterprise Linux 6	Product(s):	httpd
Definition Synopsis:
The operating system installed on the system is Red Hat Enterprise Linux 6 Packages section httpd-devel is earlier than 0:2.2.15-9.el6_1.3 AND httpd-tools is earlier than 0:2.2.15-9.el6_1.3 AND httpd-manual is earlier than 0:2.2.15-9.el6_1.3 AND mod_ssl is earlier than 0:2.2.15-9.el6_1.3 AND httpd is earlier than 0:2.2.15-9.el6_1.3

Definition Id: oval:org.mitre.oval:def:22123

Oval ID:	oval:org.mitre.oval:def:22123
Title:	RHSA-2011:1392: httpd security and bug fix update (Moderate)
Description:	The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an initial @ (at sign) character.
Family:	unix	Class:	patch
Reference(s):	RHSA-2011:1392-01 CESA-2011:1392 CVE-2011-3368	Version:	4
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	httpd
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section httpd-manual is earlier than 0:2.2.3-53.el5_7.3 AND httpd-devel is earlier than 0:2.2.3-53.el5_7.3 AND mod_ssl is earlier than 0:2.2.3-53.el5_7.3 AND httpd is earlier than 0:2.2.3-53.el5_7.3

Definition Id: oval:org.mitre.oval:def:23276

Oval ID:	oval:org.mitre.oval:def:23276
Title:	ELSA-2011:1392: httpd security and bug fix update (Moderate)
Description:	The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an initial @ (at sign) character.
Family:	unix	Class:	patch
Reference(s):	ELSA-2011:1392-01 CVE-2011-3368	Version:	6
Platform(s):	Oracle Linux 5	Product(s):	httpd
Definition Synopsis:
Oracle Linux 5.x rpm test httpd-manual is earlier than 0:2.2.3-53.el5_7.3 AND httpd-devel is earlier than 0:2.2.3-53.el5_7.3 AND mod_ssl is earlier than 0:2.2.3-53.el5_7.3 AND httpd is earlier than 0:2.2.3-53.el5_7.3

Definition Id: oval:org.mitre.oval:def:23761

Oval ID:	oval:org.mitre.oval:def:23761
Title:	ELSA-2011:1391: httpd security and bug fix update (Moderate)
Description:	The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an initial @ (at sign) character.
Family:	unix	Class:	patch
Reference(s):	ELSA-2011:1391-01 CVE-2011-3348 CVE-2011-3368	Version:	13
Platform(s):	Oracle Linux 6	Product(s):	httpd
Definition Synopsis:
Oracle Linux 6.x rpm test httpd-devel is earlier than 0:2.2.15-9.el6_1.3 AND httpd-tools is earlier than 0:2.2.15-9.el6_1.3 AND httpd-manual is earlier than 0:2.2.15-9.el6_1.3 AND mod_ssl is earlier than 0:2.2.15-9.el6_1.3 AND httpd is earlier than 0:2.2.15-9.el6_1.3

Definition Id: oval:org.mitre.oval:def:28122

Oval ID:	oval:org.mitre.oval:def:28122
Title:	DEPRECATED: ELSA-2011-1391 -- httpd security and bug fix update (moderate)
Description:	[2.2.15-9.0.1.el6_1.3] - replace index.html with Oracle's index page - update vstring in specfile [2.2.15-9.3] - add security fixes for CVE-2011-3347, CVE-2011-3368 (#743901) - fix regressions in CVE-2011-3192 patch (#736592)
Family:	unix	Class:	patch
Reference(s):	ELSA-2011-1391 CVE-2011-3348 CVE-2011-3368	Version:	4
Platform(s):	Oracle Linux 6	Product(s):	httpd
Definition Synopsis:
Oracle Linux 6.x Packages match section httpd is earlier than 0:2.2.15-9.0.1.el6_1.3 AND httpd-devel is earlier than 0:2.2.15-9.0.1.el6_1.3 AND httpd-manual is earlier than 0:2.2.15-9.0.1.el6_1.3 AND httpd-tools is earlier than 0:2.2.15-9.0.1.el6_1.3 AND mod_ssl is earlier than 0:2.2.15-9.0.1.el6_1.3

CPE : Common Platform Enumeration

Type	Description	Count
Application	Apache Http Server cpe:2.3:a:apache:http_server:2.2.9:::::::* cpe:2.3:a:apache:http_server:2.2.8:::::::* cpe:2.3:a:apache:http_server:2.2.6:::::::* cpe:2.3:a:apache:http_server:2.2.4:::::::* cpe:2.3:a:apache:http_server:2.2.3:::::::* cpe:2.3:a:apache:http_server:2.2.21:::::::* cpe:2.3:a:apache:http_server:2.2.20:::::::* cpe:2.3:a:apache:http_server:2.2.2:::::::* cpe:2.3:a:apache:http_server:2.2.19:::::::* cpe:2.3:a:apache:http_server:2.2.18:::::::* cpe:2.3:a:apache:http_server:2.2.16:::::::* cpe:2.3:a:apache:http_server:2.2.15:::::::* cpe:2.3:a:apache:http_server:2.2.14:::::::* cpe:2.3:a:apache:http_server:2.2.13:::::::* cpe:2.3:a:apache:http_server:2.2.12:::::::* cpe:2.3:a:apache:http_server:2.2.11:::::::* cpe:2.3:a:apache:http_server:2.2.10:::::::* cpe:2.3:a:apache:http_server:2.2.1:::::::* cpe:2.3:a:apache:http_server:2.2.0:::::::* cpe:2.3:a:apache:http_server:2.0.9:::::::* cpe:2.3:a:apache:http_server:2.0.64:::::::* cpe:2.3:a:apache:http_server:2.0.63:::::::* cpe:2.3:a:apache:http_server:2.0.61:::::::* cpe:2.3:a:apache:http_server:2.0.60:::::::* cpe:2.3:a:apache:http_server:2.0.59:::::::* cpe:2.3:a:apache:http_server:2.0.58:::::::* cpe:2.3:a:apache:http_server:2.0.57:::::::* cpe:2.3:a:apache:http_server:2.0.56:::::::* cpe:2.3:a:apache:http_server:2.0.55:::::::* cpe:2.3:a:apache:http_server:2.0.54:::::::* cpe:2.3:a:apache:http_server:2.0.53:::::::* cpe:2.3:a:apache:http_server:2.0.52:::::::* cpe:2.3:a:apache:http_server:2.0.51:::::::* cpe:2.3:a:apache:http_server:2.0.50:::::::* cpe:2.3:a:apache:http_server:2.0.49:::::::* cpe:2.3:a:apache:http_server:2.0.48:::::::* cpe:2.3:a:apache:http_server:2.0.47:::::::* cpe:2.3:a:apache:http_server:2.0.46:::::::* cpe:2.3:a:apache:http_server:2.0.45:::::::* cpe:2.3:a:apache:http_server:2.0.44:::::::* cpe:2.3:a:apache:http_server:2.0.43:::::::* cpe:2.3:a:apache:http_server:2.0.42:::::::* cpe:2.3:a:apache:http_server:2.0.41:::::::* cpe:2.3:a:apache:http_server:2.0.40:::::::* cpe:2.3:a:apache:http_server:2.0.39:::::::* cpe:2.3:a:apache:http_server:2.0.38:::::::* cpe:2.3:a:apache:http_server:2.0.37:::::::* cpe:2.3:a:apache:http_server:2.0.36:::::::* cpe:2.3:a:apache:http_server:2.0.35:::::::* cpe:2.3:a:apache:http_server:2.0.34:beta:::::: cpe:2.3:a:apache:http_server:2.0.32:::::::* cpe:2.3:a:apache:http_server:2.0.32:beta:::::: cpe:2.3:a:apache:http_server:2.0.28:::::::* cpe:2.3:a:apache:http_server:2.0.28:beta:::::: cpe:2.3:a:apache:http_server:2.0:::::::* cpe:2.3:a:apache:http_server:1.3.9:::::::* cpe:2.3:a:apache:http_server:1.3.8:::::::* cpe:2.3:a:apache:http_server:1.3.7:::::::* cpe:2.3:a:apache:http_server:1.3.68:::::::* cpe:2.3:a:apache:http_server:1.3.65:::::::* cpe:2.3:a:apache:http_server:1.3.6:::::::* cpe:2.3:a:apache:http_server:1.3.5:::::::* cpe:2.3:a:apache:http_server:1.3.42:::::::* cpe:2.3:a:apache:http_server:1.3.41:::::::* cpe:2.3:a:apache:http_server:1.3.4:::::::* cpe:2.3:a:apache:http_server:1.3.39:::::::* cpe:2.3:a:apache:http_server:1.3.38:::::::* cpe:2.3:a:apache:http_server:1.3.37:::::::* cpe:2.3:a:apache:http_server:1.3.36:::::::* cpe:2.3:a:apache:http_server:1.3.35:::::::* cpe:2.3:a:apache:http_server:1.3.34:::::::* cpe:2.3:a:apache:http_server:1.3.33:::::::* cpe:2.3:a:apache:http_server:1.3.32:::::::* cpe:2.3:a:apache:http_server:1.3.31:::::::* cpe:2.3:a:apache:http_server:1.3.30:::::::* cpe:2.3:a:apache:http_server:1.3.3:::::::* cpe:2.3:a:apache:http_server:1.3.29:::::::* cpe:2.3:a:apache:http_server:1.3.28:::::::* cpe:2.3:a:apache:http_server:1.3.27:::::::* cpe:2.3:a:apache:http_server:1.3.26:::::::* cpe:2.3:a:apache:http_server:1.3.25:::::::* cpe:2.3:a:apache:http_server:1.3.24:::::::* cpe:2.3:a:apache:http_server:1.3.23:::::::* cpe:2.3:a:apache:http_server:1.3.22:::::::* cpe:2.3:a:apache:http_server:1.3.20:::::::* cpe:2.3:a:apache:http_server:1.3.2:::::::* cpe:2.3:a:apache:http_server:1.3.19:::::::* cpe:2.3:a:apache:http_server:1.3.18:::::::* cpe:2.3:a:apache:http_server:1.3.17:::::::* cpe:2.3:a:apache:http_server:1.3.16:::::::* cpe:2.3:a:apache:http_server:1.3.15:::::::* cpe:2.3:a:apache:http_server:1.3.14:::::::* cpe:2.3:a:apache:http_server:1.3.13:::::::* cpe:2.3:a:apache:http_server:1.3.12:::::::* cpe:2.3:a:apache:http_server:1.3.11:::::::* cpe:2.3:a:apache:http_server:1.3.10:::::::* cpe:2.3:a:apache:http_server:1.3.1.1:::::::* cpe:2.3:a:apache:http_server:1.3.1:::::::* cpe:2.3:a:apache:http_server:1.3.0:::::::* cpe:2.3:a:apache:http_server:1.3:::::::*	100

ExploitDB Exploits

id	Description
2011-10-11	Apache mod_proxy Reverse Proxy Exposure Vulnerability PoC

OpenVAS Exploits

Date	Description
2012-09-25	Name : Mac OS X v10.6.8 Multiple Vulnerabilities (2012-004) File : nvt/gb_macosx_su12-004.nasl
2012-09-10	Name : Slackware Advisory SSA:2012-041-01 httpd File : nvt/esoft_slk_ssa_2012_041_01.nasl
2012-08-10	Name : Gentoo Security Advisory GLSA 201206-25 (apache) File : nvt/glsa_201206_25.nasl
2012-07-30	Name : CentOS Update for httpd CESA-2011:1392 centos4 x86_64 File : nvt/gb_CESA-2011_1392_httpd_centos4_x86_64.nasl
2012-07-30	Name : CentOS Update for httpd CESA-2012:0128 centos6 File : nvt/gb_CESA-2012_0128_httpd_centos6.nasl
2012-07-30	Name : CentOS Update for httpd CESA-2011:1392 centos5 x86_64 File : nvt/gb_CESA-2011_1392_httpd_centos5_x86_64.nasl
2012-07-09	Name : RedHat Update for httpd RHSA-2012:0128-01 File : nvt/gb_RHSA-2012_0128-01_httpd.nasl
2012-07-09	Name : RedHat Update for httpd RHSA-2011:1391-01 File : nvt/gb_RHSA-2011_1391-01_httpd.nasl
2012-04-26	Name : Apache HTTP Server 'httpOnly' Cookie Information Disclosure Vulnerability File : nvt/secpod_apache_http_srv_cookie_info_disc_vuln.nasl
2012-04-02	Name : Fedora Update for httpd FEDORA-2012-1598 File : nvt/gb_fedora_2012_1598_httpd_fc16.nasl
2012-03-07	Name : Fedora Update for httpd FEDORA-2012-1642 File : nvt/gb_fedora_2012_1642_httpd_fc15.nasl
2012-02-27	Name : RedHat Update for httpd RHSA-2012:0323-01 File : nvt/gb_RHSA-2012_0323-01_httpd.nasl
2012-02-13	Name : Debian Security Advisory DSA 2405-1 (apache2) File : nvt/deb_2405_1.nasl
2012-02-12	Name : FreeBSD Ports: apache File : nvt/freebsd_apache20.nasl
2012-01-13	Name : Mandriva Update for apache MDVSA-2012:003 (apache) File : nvt/gb_mandriva_MDVSA_2012_003.nasl
2011-11-11	Name : CentOS Update for httpd CESA-2011:1392 centos4 i386 File : nvt/gb_CESA-2011_1392_httpd_centos4_i386.nasl
2011-11-11	Name : Ubuntu Update for apache2 USN-1259-1 File : nvt/gb_ubuntu_USN_1259_1.nasl
2011-10-21	Name : CentOS Update for httpd CESA-2011:1392 centos5 i386 File : nvt/gb_CESA-2011_1392_httpd_centos5_i386.nasl
2011-10-21	Name : RedHat Update for httpd RHSA-2011:1392-01 File : nvt/gb_RHSA-2011_1392-01_httpd.nasl
2011-10-10	Name : Mandriva Update for apache MDVSA-2011:144 (apache) File : nvt/gb_mandriva_MDVSA_2011_144.nasl
0000-00-00	Name : Apache HTTP Server 'mod_proxy' Reverse Proxy Information Disclosure Vulnerabi... File : nvt/gb_apache_49957.nasl
0000-00-00	Name : FreeBSD Ports: apache File : nvt/freebsd_apache19.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
76079	Apache HTTP Server mod_proxy Mdule Web Request URL Parsing Proxy Remote Secur...

Snort® IPS/IDS

Date	Description
2014-01-10	Apache server mod_proxy reverse proxy bypass attempt RuleID : 21214 - Revision : 11 - Type : SERVER-APACHE
2014-01-10	Apache server mod_proxy reverse proxy exposure attempt RuleID : 20580 - Revision : 2 - Type : WEB-MISC
2014-01-10	Apache mod_proxy reverse proxy information disclosure attempt RuleID : 20528 - Revision : 13 - Type : SERVER-APACHE

Nessus® Vulnerability Scanner

Date	Description
2015-05-20	Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2013-0469-1.nasl - Type : ACT_GATHER_INFO
2015-01-19	Name : The remote Solaris system is missing a security patch for third-party software. File : solaris11_apache_20120420.nasl - Type : ACT_GATHER_INFO
2014-12-22	Name : The remote device is affected by multiple vulnerabilities. File : juniper_space_jsa10585.nasl - Type : ACT_GATHER_INFO
2014-12-16	Name : The remote openSUSE host is missing a security update. File : openSUSE-2014-770.nasl - Type : ACT_GATHER_INFO
2014-12-05	Name : The remote device is missing a vendor-supplied security patch. File : f5_bigip_SOL15889.nasl - Type : ACT_GATHER_INFO
2014-11-08	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2012-0542.nasl - Type : ACT_GATHER_INFO
2014-10-12	Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2011-9.nasl - Type : ACT_GATHER_INFO
2014-08-22	Name : The remote host is affected by multiple vulnerabilities. File : juniper_nsm_jsa10642.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_4_apache2-111205.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_4_apache2-111026.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_apache2-111205.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_apache2-111026.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2013-80.nasl - Type : ACT_GATHER_INFO
2013-09-04	Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2011-09.nasl - Type : ACT_GATHER_INFO
2013-09-04	Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2012-46.nasl - Type : ACT_GATHER_INFO
2013-07-16	Name : The remote web server is affected by several vulnerabilities. File : apache_2_0_65.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2012-0323.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2012-0128.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2011-1392.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2011-1391.nasl - Type : ACT_GATHER_INFO
2013-03-05	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_apache2-130225.nasl - Type : ACT_GATHER_INFO
2012-09-20	Name : The remote host is missing a Mac OS X update that fixes multiple security vul... File : macosx_SecUpd2012-004.nasl - Type : ACT_GATHER_INFO
2012-09-20	Name : The remote host is missing a Mac OS X update that fixes multiple security vul... File : macosx_10_7_5.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20111020_httpd_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20111020_httpd_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20120213_httpd_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20120221_httpd_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-06-25	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201206-25.nasl - Type : ACT_GATHER_INFO
2012-04-20	Name : The remote web server is affected by multiple vulnerabilities. File : hpsmh_7_0_0_24.nasl - Type : ACT_GATHER_INFO
2012-03-07	Name : The remote Fedora host is missing a security update. File : fedora_2012-1642.nasl - Type : ACT_GATHER_INFO
2012-02-22	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2012-0323.nasl - Type : ACT_GATHER_INFO
2012-02-21	Name : The remote Fedora host is missing a security update. File : fedora_2012-1598.nasl - Type : ACT_GATHER_INFO
2012-02-16	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2012-0128.nasl - Type : ACT_GATHER_INFO
2012-02-14	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2012-0128.nasl - Type : ACT_GATHER_INFO
2012-02-13	Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2012-041-01.nasl - Type : ACT_GATHER_INFO
2012-02-09	Name : The web server running on the remote host has an information disclosure vulne... File : apache_mod_proxy_info_leak2.nasl - Type : ACT_ATTACK
2012-02-07	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2405.nasl - Type : ACT_GATHER_INFO
2012-02-02	Name : The remote FreeBSD host is missing a security-related update. File : freebsd_pkg_4b7dbfab4c6b11e1bc160023ae8e59f0.nasl - Type : ACT_GATHER_INFO
2012-02-02	Name : The remote web server is affected by multiple vulnerabilities. File : apache_2_2_22.nasl - Type : ACT_GATHER_INFO
2012-01-11	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2012-003.nasl - Type : ACT_GATHER_INFO
2011-12-14	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_apache2-7882.nasl - Type : ACT_GATHER_INFO
2011-12-13	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_apache2-111130.nasl - Type : ACT_GATHER_INFO
2011-12-13	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_apache2-111026.nasl - Type : ACT_GATHER_INFO
2011-11-29	Name : The web server running on the remote host has an information disclosure vulne... File : apache_mod_proxy_info_leak.nasl - Type : ACT_ATTACK
2011-11-15	Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_d8c901ff0f0f11e1902b20cf30e32f6d.nasl - Type : ACT_GATHER_INFO
2011-11-11	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1259-1.nasl - Type : ACT_GATHER_INFO
2011-10-21	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-1392.nasl - Type : ACT_GATHER_INFO
2011-10-21	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2011-1392.nasl - Type : ACT_GATHER_INFO
2011-10-21	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-1391.nasl - Type : ACT_GATHER_INFO
2011-10-10	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2011-144.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

Source	Url
AIXAPAR	http://www-01.ibm.com/support/docview.wss?uid=nas2064c7e5f53452ff686257927003... http://www-01.ibm.com/support/docview.wss?uid=nas2b7c57b1f1035675186257927003...
APPLE	http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html
BID	http://www.securityfocus.com/bid/49957
CONFIRM	http://kb.juniper.net/JSA10585 http://support.apple.com/kb/HT5501 http://svn.apache.org/viewvc?view=revision&revision=1179239 http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html https://bugzilla.redhat.com/show_bug.cgi?id=740045
DEBIAN	http://www.debian.org/security/2012/dsa-2405
EXPLOIT-DB	http://www.exploit-db.com/exploits/17969
FULLDISC	http://seclists.org/fulldisclosure/2011/Oct/232 http://seclists.org/fulldisclosure/2011/Oct/273
HP	http://marc.info/?l=bugtraq&m=133294460209056&w=2 http://marc.info/?l=bugtraq&m=134987041210674&w=2
MANDRIVA	http://www.mandriva.com/security/advisories?name=MDVSA-2011:144 http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
MISC	http://www.contextis.com/research/blog/reverseproxybypass/
MLIST	http://web.archiveorange.com/archive/v/ZyS0hzECD5zzb2NkvQlt
OSVDB	http://osvdb.org/76079
REDHAT	http://rhn.redhat.com/errata/RHSA-2012-0542.html http://rhn.redhat.com/errata/RHSA-2012-0543.html http://www.redhat.com/support/errata/RHSA-2011-1391.html http://www.redhat.com/support/errata/RHSA-2011-1392.html
SECTRACK	http://www.securitytracker.com/id?1026144
SECUNIA	http://secunia.com/advisories/46288 http://secunia.com/advisories/46414 http://secunia.com/advisories/48551
SUSE	http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00011.html http://lists.opensuse.org/opensuse-updates/2013-02/msg00009.html http://lists.opensuse.org/opensuse-updates/2013-02/msg00012.html
XF	https://exchange.xforce.ibmcloud.com/vulnerabilities/70336

Alert History

If you want to see full details history, please login or register.

Date	Informations
2023-11-07 21:47:13	Multiple Updates
2021-06-16 12:10:27	Multiple Updates
2021-06-12 09:23:00	Multiple Updates
2021-06-06 17:23:02	Multiple Updates
2021-06-03 13:23:12	Multiple Updates
2021-05-04 12:18:54	Multiple Updates
2021-04-22 01:22:37	Multiple Updates
2021-03-30 21:23:09	Multiple Updates
2021-03-30 17:22:48	Multiple Updates
2020-05-23 00:31:05	Multiple Updates
2019-08-21 12:01:28	Multiple Updates
2019-03-19 12:04:34	Multiple Updates
2018-01-09 13:22:53	Multiple Updates
2017-12-29 09:21:56	Multiple Updates
2017-08-29 09:23:31	Multiple Updates
2016-06-17 09:26:38	Multiple Updates
2016-04-26 21:03:32	Multiple Updates
2015-05-21 13:29:20	Multiple Updates
2015-04-22 00:25:28	Multiple Updates
2015-04-21 09:24:18	Multiple Updates
2015-04-15 09:27:17	Multiple Updates
2015-01-22 17:22:31	Multiple Updates
2015-01-21 13:24:57	Multiple Updates
2014-12-23 13:26:05	Multiple Updates
2014-12-17 13:25:16	Multiple Updates
2014-12-06 13:26:57	Multiple Updates
2014-11-08 13:29:50	Multiple Updates
2014-10-12 13:26:46	Multiple Updates
2014-08-23 13:27:36	Multiple Updates
2014-06-14 13:31:34	Multiple Updates
2014-02-17 11:05:05	Multiple Updates
2014-01-19 21:28:07	Multiple Updates
2013-10-11 13:23:10	Multiple Updates
2013-08-17 17:20:23	Multiple Updates
2013-05-10 23:07:15	Multiple Updates
2013-02-07 13:19:53	Multiple Updates

Global Informations

Type	Count
CWE ID(s)	1
Oval ID(s)	5
CPE ID(s)	100
Sources(s)	55
osvdb(s)	1
ExploitDB Exploit(s)	1
Openvas Exploit(s)	22
Snort® Rule(s)	3
Nessus® Exploit(s)	50

	Related
10	MDVSA-2013:150
10	HPSBMU02764 SSR...
7.8	RHSA-2011:1392
7.8	RHSA-2011:1391
7.8	HPSBOV02822 SSR...
7.8	GLSA-201206-25
7.5	CVE-2021-31618
5.5	CVE-2020-13938
5	USN-1259-1
5	RHSA-2012:0323
5	RHSA-2012:0128
5	MDVSA-2012:003
5	MDVSA-2011:144
5	HPSBMU02748 SSR...
5	DSA-2405
5	CVE-2010-2068
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 16 more Alert(s)