CVE-2011-3368
CVE-2011-3368
The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an initial @ (at sign) character.
Productos afectados
n/a · n/aPoCs públicas encontradas — 4
githubgithub.com/SECFORCE/CVE-2011-3368★ 1githubgithub.com/colorblindpentester/CVE-2011-3368★ 0cve_referencewww.exploit-db.com/exploits/17969no verificadoexploitdbwww.exploit-db.com/exploits/17969no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →Referencias
http://kb.juniper.net/JSA10585http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-11/msg00011.htmlhttp://lists.opensuse.org/opensuse-updates/2013-02/msg00009.htmlhttp://lists.opensuse.org/opensuse-updates/2013-02/msg00012.htmlhttp://marc.info/?l=bugtraq&m=133294460209056&w=2http://marc.info/?l=bugtraq&m=134987041210674&w=2http://osvdb.org/76079http://rhn.redhat.com/errata/RHSA-2012-0542.htmlhttp://rhn.redhat.com/errata/RHSA-2012-0543.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=740045http://seclists.org/fulldisclosure/2011/Oct/232