CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2011-3368

The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an initial @ (at sign) character.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.791

EPSS Ranking 99.0%

CVSS Severity

CVSS v2 Score 5.0

References

Products affected by CVE-2011-3368

Apache » Http Server » Version: 1.3

cpe:2.3:a:apache:http_server:1.3
Apache » Http Server » Version: 1.3.0

cpe:2.3:a:apache:http_server:1.3.0
Apache » Http Server » Version: 1.3.1

cpe:2.3:a:apache:http_server:1.3.1
Apache » Http Server » Version: 1.3.1.1

cpe:2.3:a:apache:http_server:1.3.1.1
Apache » Http Server » Version: 1.3.10

cpe:2.3:a:apache:http_server:1.3.10
Apache » Http Server » Version: 1.3.11

cpe:2.3:a:apache:http_server:1.3.11
Apache » Http Server » Version: 1.3.12

cpe:2.3:a:apache:http_server:1.3.12
Apache » Http Server » Version: 1.3.13

cpe:2.3:a:apache:http_server:1.3.13
Apache » Http Server » Version: 1.3.14

cpe:2.3:a:apache:http_server:1.3.14
Apache » Http Server » Version: 1.3.15

cpe:2.3:a:apache:http_server:1.3.15
Apache » Http Server » Version: 1.3.16

cpe:2.3:a:apache:http_server:1.3.16
Apache » Http Server » Version: 1.3.17

cpe:2.3:a:apache:http_server:1.3.17
Apache » Http Server » Version: 1.3.18

cpe:2.3:a:apache:http_server:1.3.18
Apache » Http Server » Version: 1.3.19

cpe:2.3:a:apache:http_server:1.3.19
Apache » Http Server » Version: 1.3.2

cpe:2.3:a:apache:http_server:1.3.2
Apache » Http Server » Version: 1.3.20

cpe:2.3:a:apache:http_server:1.3.20
Apache » Http Server » Version: 1.3.22

cpe:2.3:a:apache:http_server:1.3.22
Apache » Http Server » Version: 1.3.23

cpe:2.3:a:apache:http_server:1.3.23
Apache » Http Server » Version: 1.3.24

cpe:2.3:a:apache:http_server:1.3.24
Apache » Http Server » Version: 1.3.25

cpe:2.3:a:apache:http_server:1.3.25
Apache » Http Server » Version: 1.3.26

cpe:2.3:a:apache:http_server:1.3.26
Apache » Http Server » Version: 1.3.27

cpe:2.3:a:apache:http_server:1.3.27
Apache » Http Server » Version: 1.3.28

cpe:2.3:a:apache:http_server:1.3.28
Apache » Http Server » Version: 1.3.29

cpe:2.3:a:apache:http_server:1.3.29
Apache » Http Server » Version: 1.3.3

cpe:2.3:a:apache:http_server:1.3.3
Apache » Http Server » Version: 1.3.30

cpe:2.3:a:apache:http_server:1.3.30
Apache » Http Server » Version: 1.3.31

cpe:2.3:a:apache:http_server:1.3.31
Apache » Http Server » Version: 1.3.32

cpe:2.3:a:apache:http_server:1.3.32
Apache » Http Server » Version: 1.3.33

cpe:2.3:a:apache:http_server:1.3.33
Apache » Http Server » Version: 1.3.34

cpe:2.3:a:apache:http_server:1.3.34
Apache » Http Server » Version: 1.3.35

cpe:2.3:a:apache:http_server:1.3.35
Apache » Http Server » Version: 1.3.36

cpe:2.3:a:apache:http_server:1.3.36
Apache » Http Server » Version: 1.3.37

cpe:2.3:a:apache:http_server:1.3.37
Apache » Http Server » Version: 1.3.38

cpe:2.3:a:apache:http_server:1.3.38
Apache » Http Server » Version: 1.3.39

cpe:2.3:a:apache:http_server:1.3.39
Apache » Http Server » Version: 1.3.4

cpe:2.3:a:apache:http_server:1.3.4
Apache » Http Server » Version: 1.3.41

cpe:2.3:a:apache:http_server:1.3.41
Apache » Http Server » Version: 1.3.42

cpe:2.3:a:apache:http_server:1.3.42
Apache » Http Server » Version: 1.3.5

cpe:2.3:a:apache:http_server:1.3.5
Apache » Http Server » Version: 1.3.6

cpe:2.3:a:apache:http_server:1.3.6
Apache » Http Server » Version: 1.3.65

cpe:2.3:a:apache:http_server:1.3.65
Apache » Http Server » Version: 1.3.68

cpe:2.3:a:apache:http_server:1.3.68
Apache » Http Server » Version: 1.3.7

cpe:2.3:a:apache:http_server:1.3.7
Apache » Http Server » Version: 1.3.8

cpe:2.3:a:apache:http_server:1.3.8
Apache » Http Server » Version: 1.3.9

cpe:2.3:a:apache:http_server:1.3.9
Apache » Http Server » Version: 2.0

cpe:2.3:a:apache:http_server:2.0
Apache » Http Server » Version: 2.0.28

cpe:2.3:a:apache:http_server:2.0.28
Apache » Http Server » Version: 2.0.32

cpe:2.3:a:apache:http_server:2.0.32
Apache » Http Server » Version: 2.0.34

cpe:2.3:a:apache:http_server:2.0.34
Apache » Http Server » Version: 2.0.35

cpe:2.3:a:apache:http_server:2.0.35
Apache » Http Server » Version: 2.0.36

cpe:2.3:a:apache:http_server:2.0.36
Apache » Http Server » Version: 2.0.37

cpe:2.3:a:apache:http_server:2.0.37
Apache » Http Server » Version: 2.0.38

cpe:2.3:a:apache:http_server:2.0.38
Apache » Http Server » Version: 2.0.39

cpe:2.3:a:apache:http_server:2.0.39
Apache » Http Server » Version: 2.0.40

cpe:2.3:a:apache:http_server:2.0.40
Apache » Http Server » Version: 2.0.41

cpe:2.3:a:apache:http_server:2.0.41
Apache » Http Server » Version: 2.0.42

cpe:2.3:a:apache:http_server:2.0.42
Apache » Http Server » Version: 2.0.43

cpe:2.3:a:apache:http_server:2.0.43
Apache » Http Server » Version: 2.0.44

cpe:2.3:a:apache:http_server:2.0.44
Apache » Http Server » Version: 2.0.45

cpe:2.3:a:apache:http_server:2.0.45
Apache » Http Server » Version: 2.0.46

cpe:2.3:a:apache:http_server:2.0.46
Apache » Http Server » Version: 2.0.47

cpe:2.3:a:apache:http_server:2.0.47
Apache » Http Server » Version: 2.0.48

cpe:2.3:a:apache:http_server:2.0.48
Apache » Http Server » Version: 2.0.49

cpe:2.3:a:apache:http_server:2.0.49
Apache » Http Server » Version: 2.0.50

cpe:2.3:a:apache:http_server:2.0.50
Apache » Http Server » Version: 2.0.51

cpe:2.3:a:apache:http_server:2.0.51
Apache » Http Server » Version: 2.0.52

cpe:2.3:a:apache:http_server:2.0.52
Apache » Http Server » Version: 2.0.53

cpe:2.3:a:apache:http_server:2.0.53
Apache » Http Server » Version: 2.0.54

cpe:2.3:a:apache:http_server:2.0.54
Apache » Http Server » Version: 2.0.55

cpe:2.3:a:apache:http_server:2.0.55
Apache » Http Server » Version: 2.0.56

cpe:2.3:a:apache:http_server:2.0.56
Apache » Http Server » Version: 2.0.57

cpe:2.3:a:apache:http_server:2.0.57
Apache » Http Server » Version: 2.0.58

cpe:2.3:a:apache:http_server:2.0.58
Apache » Http Server » Version: 2.0.59

cpe:2.3:a:apache:http_server:2.0.59
Apache » Http Server » Version: 2.0.60

cpe:2.3:a:apache:http_server:2.0.60
Apache » Http Server » Version: 2.0.61

cpe:2.3:a:apache:http_server:2.0.61
Apache » Http Server » Version: 2.0.63

cpe:2.3:a:apache:http_server:2.0.63
Apache » Http Server » Version: 2.0.64

cpe:2.3:a:apache:http_server:2.0.64
Apache » Http Server » Version: 2.0.9

cpe:2.3:a:apache:http_server:2.0.9
Apache » Http Server » Version: 2.2.0

cpe:2.3:a:apache:http_server:2.2.0
Apache » Http Server » Version: 2.2.1

cpe:2.3:a:apache:http_server:2.2.1
Apache » Http Server » Version: 2.2.10

cpe:2.3:a:apache:http_server:2.2.10
Apache » Http Server » Version: 2.2.11

cpe:2.3:a:apache:http_server:2.2.11
Apache » Http Server » Version: 2.2.12

cpe:2.3:a:apache:http_server:2.2.12
Apache » Http Server » Version: 2.2.13

cpe:2.3:a:apache:http_server:2.2.13
Apache » Http Server » Version: 2.2.14

cpe:2.3:a:apache:http_server:2.2.14
Apache » Http Server » Version: 2.2.15

cpe:2.3:a:apache:http_server:2.2.15
Apache » Http Server » Version: 2.2.16

cpe:2.3:a:apache:http_server:2.2.16
Apache » Http Server » Version: 2.2.18

cpe:2.3:a:apache:http_server:2.2.18
Apache » Http Server » Version: 2.2.19

cpe:2.3:a:apache:http_server:2.2.19
Apache » Http Server » Version: 2.2.2

cpe:2.3:a:apache:http_server:2.2.2
Apache » Http Server » Version: 2.2.20

cpe:2.3:a:apache:http_server:2.2.20
Apache » Http Server » Version: 2.2.21

cpe:2.3:a:apache:http_server:2.2.21
Apache » Http Server » Version: 2.2.3

cpe:2.3:a:apache:http_server:2.2.3
Apache » Http Server » Version: 2.2.4

cpe:2.3:a:apache:http_server:2.2.4
Apache » Http Server » Version: 2.2.6

cpe:2.3:a:apache:http_server:2.2.6
Apache » Http Server » Version: 2.2.8

cpe:2.3:a:apache:http_server:2.2.8
Apache » Http Server » Version: 2.2.9

cpe:2.3:a:apache:http_server:2.2.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2011-3368

Products

Pricing

Contact Us