NetSight
IP …
medium4.3Public exploit code

CVE-2011-3639

The mod_proxy module in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x before 2.2.18, when the Revision 1179239 patch is in place, does not properly int…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The mod_proxy module in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x before 2.2.18, when the Revision 1179239 patch is in place, does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers by using the HTTP/0.9 protocol with a malformed URI containing an initial @ (at sign) character. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-3368.

Affected products

VendorProductAffected versions
ApacheHttp Server
Versions 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16
ApacheHttp Server2.0a1
All versions
ApacheHttp Server2.0a2
All versions
ApacheHttp Server2.0a3
All versions
ApacheHttp Server2.0a4
All versions
ApacheHttp Server2.0a5
All versions
ApacheHttp Server2.0a6
All versions
ApacheHttp Server2.0a7
All versions
ApacheHttp Server2.0a8
All versions
ApacheHttp Server2.0a9
All versions

Weakness classification

CWE-20

References