4.4

CVE-2011-3607

Exploit

Integer overflow in the ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x through 2.2.21, when the mod_setenvif module is enabled, allows local users to gain privileges via a .htaccess file with a crafted SetEnvIf directive, in conjunction with a crafted HTTP request header, leading to a heap-based buffer overflow.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apache ≫ HTTP Server Version2.0
Apache ≫ HTTP Server Version2.0.9
Apache ≫ HTTP Server Version2.0.28
Apache ≫ HTTP Server Version2.0.28 Updatebeta
Apache ≫ HTTP Server Version2.0.32
Apache ≫ HTTP Server Version2.0.32 Updatebeta
Apache ≫ HTTP Server Version2.0.34 Updatebeta
Apache ≫ HTTP Server Version2.0.35
Apache ≫ HTTP Server Version2.0.36
Apache ≫ HTTP Server Version2.0.37
Apache ≫ HTTP Server Version2.0.38
Apache ≫ HTTP Server Version2.0.39
Apache ≫ HTTP Server Version2.0.40
Apache ≫ HTTP Server Version2.0.41
Apache ≫ HTTP Server Version2.0.42
Apache ≫ HTTP Server Version2.0.43
Apache ≫ HTTP Server Version2.0.44
Apache ≫ HTTP Server Version2.0.45
Apache ≫ HTTP Server Version2.0.46
Apache ≫ HTTP Server Version2.0.47
Apache ≫ HTTP Server Version2.0.48
Apache ≫ HTTP Server Version2.0.49
Apache ≫ HTTP Server Version2.0.50
Apache ≫ HTTP Server Version2.0.51
Apache ≫ HTTP Server Version2.0.52
Apache ≫ HTTP Server Version2.0.53
Apache ≫ HTTP Server Version2.0.54
Apache ≫ HTTP Server Version2.0.55
Apache ≫ HTTP Server Version2.0.56
Apache ≫ HTTP Server Version2.0.57
Apache ≫ HTTP Server Version2.0.58
Apache ≫ HTTP Server Version2.0.59
Apache ≫ HTTP Server Version2.0.60
Apache ≫ HTTP Server Version2.0.61
Apache ≫ HTTP Server Version2.0.63
Apache ≫ HTTP Server Version2.0.64
Apache ≫ HTTP Server Version2.2.0
Apache ≫ HTTP Server Version2.2.1
Apache ≫ HTTP Server Version2.2.2
Apache ≫ HTTP Server Version2.2.3
Apache ≫ HTTP Server Version2.2.4
Apache ≫ HTTP Server Version2.2.6
Apache ≫ HTTP Server Version2.2.8
Apache ≫ HTTP Server Version2.2.9
Apache ≫ HTTP Server Version2.2.10
Apache ≫ HTTP Server Version2.2.11
Apache ≫ HTTP Server Version2.2.12
Apache ≫ HTTP Server Version2.2.13
Apache ≫ HTTP Server Version2.2.14
Apache ≫ HTTP Server Version2.2.15
Apache ≫ HTTP Server Version2.2.16
Apache ≫ HTTP Server Version2.2.18
Apache ≫ HTTP Server Version2.2.19
Apache ≫ HTTP Server Version2.2.20
Apache ≫ HTTP Server Version2.2.21
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.4% 0.598
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.4 3.4 6.4
AV:L/AC:M/Au:N/C:P/I:P/A:P