|
|
| |
|
| |
apache: mod_proxy reverse proxy exposure
| Package(s): | apache |
CVE #(s): | CVE-2011-3368
|
| Created: | October 10, 2011 |
Updated: | November 10, 2011 |
| Description: |
From the Mandriva advisory:
The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42,
2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly
interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern
matches for configuration of a reverse proxy, which allows remote
attackers to send requests to intranet servers via a malformed URI
containing an initial @ (at sign) character. |
| Alerts: |
|
( Log in to post comments)
|
|
|