Main
Vulnerability Database
Exploits
ID:3649 - Exploit for Permissions, Privileges, and Access Controls in Apache HTTP Server - CVE-2012-0053
ID:3649 - Exploit for Permissions, Privileges, and Access Controls in Apache HTTP Server - CVE-2012-0053
Published: July 29, 2020
Vulnerability identifier: #VU32827
Vulnerability risk: Medium
CVE-ID: CVE-2012-0053
CWE-ID: CWE-264
Exploitation vector: Remote access
Vulnerable software:
Apache HTTP Server
Apache HTTP Server
Link to public exploit:
Vulnerability description
The vulnerability allows a remote non-authenticated attacker to gain access to sensitive information.
protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construction of Bad Request (aka 400) error documents, which allows remote attackers to obtain the values of HTTPOnly cookies via vectors involving a (1) long or (2) malformed header in conjunction with crafted web script.
Remediation
Install update from vendor's website.