Heap-based buffer overflow in Apache HTTP Server - CVE-2011-3607

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU32830

Heap-based buffer overflow in Apache HTTP Server - CVE-2011-3607

Published: November 8, 2011 / Updated: July 29, 2020


Vulnerability identifier: #VU32830
CSH Severity: Medium
CVSS v4: 5.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2011-3607
CWE-ID: CWE-122
Exploitation vector: Local access
Exploit availability: Public exploit is available

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in Integer overflow in the ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x through 2.2.21, when the mod_setenvif module is enabled,. A remote attacker can use a .htaccess file with a crafted SetEnvIf directive to trigger heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


Affected software

Apache HTTP Server
apache2 (Alpine package)
HP OpenView Network Node Manager
Slackware Linux
HP-UX Web Server Suite

How to mitigate CVE-2011-3607

Update to version 2.0.65.

Apache HTTP Server - update to 2.0.65
apache2 (Alpine package) - update to 2.2.21-r2
HP-UX Web Server Suite - addressed in versions 2.35, 3.23

Links to Public Exploits and PoC-codes

External References

Related Security Bulletins