| ID |
CVE-2012-3526
|
| Summary |
The reverse proxy add forward module (mod_rpaf) 0.5 and 0.6 for the Apache HTTP Server allows remote attackers to cause a denial of service (server or application crash) via multiple X-Forwarded-For headers in a request. |
| References |
|
| Vulnerable Configurations |
-
cpe:2.3:a:thomas_eibner:mod_rpaf:0.5:*:*:*:*:*:*:*
cpe:2.3:a:thomas_eibner:mod_rpaf:0.5:*:*:*:*:*:*:*
-
cpe:2.3:a:thomas_eibner:mod_rpaf:0.6:*:*:*:*:*:*:*
cpe:2.3:a:thomas_eibner:mod_rpaf:0.6:*:*:*:*:*:*:*
-
cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*
cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*
|
| CVSS |
| Base: | 5.0 (as of 29-08-2017 - 01:31) |
| Impact: | |
| Exploitability: | |
|
| CWE |
NVD-CWE-noinfo |
| CAPEC |
|
| Access |
| Vector | Complexity | Authentication |
| NETWORK |
LOW |
NONE |
|
| Impact |
| Confidentiality | Integrity | Availability |
| NONE |
NONE |
PARTIAL |
|
| cvss-vector
via4
|
AV:N/AC:L/Au:N/C:N/I:N/A:P
|
| refmap
via4
|
| bid | 55154 | | debian | DSA-2532 | | misc | | | mlist | - [oss-security] 20120822 CVE Request: Apache mod RPAF denial of service
- [oss-security] 20120822 Re: CVE Request: Apache mod RPAF denial of service
| | secunia | 50400 | | xf | modrpaf-apache-dos(77987) |
|
| Last major update |
29-08-2017 - 01:31 |
| Published |
05-09-2012 - 23:55 |
| Last modified |
29-08-2017 - 01:31 |
