CVE-2012-0053

CVE-2012-0053

Published · Updated

45Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 82%
from disclosure to weapon3 days
Published on NVDJan 28
1st PoC+3d
exploitation probability
82%top 1% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
What the vendors declare (VEX)

Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.

Red HatVEX document ↗
Affected
2 products
Red Hat Directory Server 8 · Red Hat Enterprise Linux 4
workaround: As noted in the original reporter's advisory (see comment #5), this issue can be mitigated by using a custom ErrorDocument setting, such as: ErrorDocument 400 "Bad Request" http://httpd.apache.org/docs/2.2/mod/core.html#errordocument It should be…
Fixed
12 products (267 components)
RHEL Desktop Workstation (v. 5 client) · Red Hat Enterprise Linux (v. 5 server) · Red Hat Enterprise Linux Desktop (v. 5 client) · Red Hat Enterprise Linux Desktop (v. 6) · Red Hat Enterprise Linux Desktop Optional (v. 6) · and others 7
fix ↗
protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construction of Bad Request (aka 400) error documents, which allows remote attackers to obtain the values of HTTPOnly cookies via vectors involving a (1) long or (2) malformed header in conjunction with crafted web script.
Affected products
n/a · n/a
public PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/18442
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041http://httpd.apache.org/security/vulnerabilities_22.htmlhttp://kb.juniper.net/JSA10585http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.htmlhttp://lists.opensuse.org/opensuse-security-announce/2012-02/msg00026.htmlhttp://lists.opensuse.org/opensuse-security-announce/2012-03/msg00002.htmlhttp://marc.info/?l=bugtraq&m=133294460209056&w=2http://marc.info/?l=bugtraq&m=133494237717847&w=2http://marc.info/?l=bugtraq&m=133951357207000&w=2http://marc.info/?l=bugtraq&m=136441204617335&w=2http://rhn.redhat.com/errata/RHSA-2012-0128.htmlhttp://rhn.redhat.com/errata/RHSA-2012-0542.html