NetSight
IP …
medium4.3Public exploit code

CVE-2012-0053

protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construction of Bad Request (aka 400) error docu…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construction of Bad Request (aka 400) error documents, which allows remote attackers to obtain the values of HTTPOnly cookies via vectors involving a (1) long or (2) malformed header in conjunction with crafted web script.

Affected products

VendorProductAffected versions
ApacheHttp Server
from 2.0.0 before 2.0.65
from 2.2.0 before 2.2.22
DebianDebian Linux
Versions 5.0, 6.0, 7.0
OpensuseOpensuse
Version 11.4
SuseLinux Enterprise Server
Version 10
SuseLinux Enterprise Software Development Kit
Version 10
RedhatStorage
Version 2.0
RedhatEnterprise Linux Desktop
Version 6.0
RedhatEnterprise Linux Eus
Version 6.2
RedhatEnterprise Linux Server
Version 6.0
RedhatEnterprise Linux Workstation
Version 6.0
RedhatJboss Enterprise Web Server
Version 1.0.0

References