Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Apache HTTP Server Numeric Errors Vulnerability - CVE-2011-3607 - Vulnerability Database
Apache HTTP Server

Apache HTTP Server Numeric Errors Vulnerability - CVE-2011-3607

Medium
Reference: CVE-2011-3607
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2011-3607
Title: Apache HTTP Server Numeric Errors Vulnerability
Overview:

Integer overflow in the ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x through 2.2.21 when the mod_setenvif module is enabled allows local users to gain privileges via a .htaccess file with a crafted SetEnvIf directive in conjunction with a crafted HTTP request header leading to a heap-based buffer overflow.