imPC@ndo IT

Tracker / CVE-2011-3348

CVE-2011-3348

Medium 4.3

The mod_proxy_ajp module in the Apache HTTP Server before 2.2.21, when used with mod_proxy_balancer in certain configurations, allows remote attackers to cause a denial of service (temporary "error state" in the backend server) via a malformed HTTP request.

Affected products and versions

apache http_server · 2.2.12 → 2.2.20
redhat jboss_enterprise_web_server

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References