Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Apache HTTP Server Improper Input Validation Vulnerability - CVE-2011-3368 - Vulnerability Database
Apache HTTP Server

Apache HTTP Server Improper Input Validation Vulnerability - CVE-2011-3368

Medium
Reference: CVE-2011-3368
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2011-3368
Title: Apache HTTP Server Improper Input Validation Vulnerability
Overview:

The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42 2.0.x through 2.0.64 and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy which allows remote attackers to send requests to intranet servers via a malformed URI containing an initial (at sign) character.