← back
CVE-2011-3368

CVE-2011-3368

60Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 91%
from disclosure to weapon6 days
Published on NVDOct 5
1st PoC+6d
exploitation probability
91%top 1% of all CVEs
observed exploitation
nono source reports it
4 public exploit(s)
What the vendors declare (VEX)

Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.

Red HatVEX document ↗
Affected
1 product
Red Hat Directory Server 8
no_fix_planned: Will not fix
Fixed
11 products (285 components)
Red Hat Enterprise Linux AS version 4 · Red Hat Enterprise Linux Desktop version 4 · Red Hat Enterprise Linux ES version 4 · Red Hat Enterprise Linux WS version 4 · RHEL Desktop Workstation (v. 5 client) · and others 6
fix ↗
The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an initial @ (at sign) character.
Affected products
n/a · n/a
public PoCs found — 4✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/17969githubgithub.com/SECFORCE/CVE-2011-3368★ 1githubgithub.com/colorblindpentester/CVE-2011-3368★ 0cve_referencewww.exploit-db.com/exploits/17969unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://kb.juniper.net/JSA10585http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-11/msg00011.htmlhttp://lists.opensuse.org/opensuse-updates/2013-02/msg00009.htmlhttp://lists.opensuse.org/opensuse-updates/2013-02/msg00012.htmlhttp://marc.info/?l=bugtraq&m=133294460209056&w=2http://marc.info/?l=bugtraq&m=134987041210674&w=2http://osvdb.org/76079http://rhn.redhat.com/errata/RHSA-2012-0542.htmlhttp://rhn.redhat.com/errata/RHSA-2012-0543.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=740045http://seclists.org/fulldisclosure/2011/Oct/232