ByteOS Network

CVE Vulnerability Details :

CVE-2011-1928

PUBLISHED

More Info Official Page

Assigner-redhat

Assigner Org ID-53f830b8-0a3f-465b-8143-3b8a9948e749

Published At-24 May, 2011 | 23:00

Updated At-06 Aug, 2024 | 22:46

▼CVE Numbering Authority (CNA)

The fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library 1.4.3 and 1.4.4, and the Apache HTTP Server 2.2.18, allows remote attackers to cause a denial of service (infinite loop) via a URI that does not match unspecified types of wildcard patterns, as demonstrated by attacks against mod_autoindex in httpd when a /*/WEB-INF/ configuration pattern is used. NOTE: this issue exists because of an incorrect fix for CVE-2011-0419.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

References

Hyperlink	Resource
http://www.redhat.com/support/errata/RHSA-2011-0844.html	vendor-advisory x_refsource_REDHAT
http://secunia.com/advisories/44661	third-party-advisory x_refsource_SECUNIA
http://marc.info/?l=bugtraq&m=134987041210674&w=2	vendor-advisory x_refsource_HP
http://secunia.com/advisories/48308	third-party-advisory x_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=MDVSA-2011:095	vendor-advisory x_refsource_MANDRIVA
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=627182	x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2011/1289	vdb-entry x_refsource_VUPEN
http://marc.info/?l=bugtraq&m=134987041210674&w=2	vendor-advisory x_refsource_HP
http://secunia.com/advisories/44613	third-party-advisory x_refsource_SECUNIA
http://mail-archives.apache.org/mod_mbox/www-announce/201105.mbox/%3c4DD55076.1060005%40apache.org%3e	mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/05/19/5	mailing-list x_refsource_MLIST
http://secunia.com/advisories/44780	third-party-advisory x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2011/1290	vdb-entry x_refsource_VUPEN
http://secunia.com/advisories/44558	third-party-advisory x_refsource_SECUNIA
http://openwall.com/lists/oss-security/2011/05/19/10	mailing-list x_refsource_MLIST
http://mail-archives.apache.org/mod_mbox/httpd-announce/201105.mbox/%3C4DD55092.3030403%40apache.org%3E	mailing-list x_refsource_MLIST
https://issues.apache.org/bugzilla/show_bug.cgi?id=51219	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00011.html	vendor-advisory x_refsource_SUSE

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.redhat.com/support/errata/RHSA-2011-0844.html	vendor-advisory x_refsource_REDHAT x_transferred
http://secunia.com/advisories/44661	third-party-advisory x_refsource_SECUNIA x_transferred
http://marc.info/?l=bugtraq&m=134987041210674&w=2	vendor-advisory x_refsource_HP x_transferred
http://secunia.com/advisories/48308	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.mandriva.com/security/advisories?name=MDVSA-2011:095	vendor-advisory x_refsource_MANDRIVA x_transferred
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=627182	x_refsource_CONFIRM x_transferred
http://www.vupen.com/english/advisories/2011/1289	vdb-entry x_refsource_VUPEN x_transferred
http://marc.info/?l=bugtraq&m=134987041210674&w=2	vendor-advisory x_refsource_HP x_transferred
http://secunia.com/advisories/44613	third-party-advisory x_refsource_SECUNIA x_transferred
http://mail-archives.apache.org/mod_mbox/www-announce/201105.mbox/%3c4DD55076.1060005%40apache.org%3e	mailing-list x_refsource_MLIST x_transferred
http://openwall.com/lists/oss-security/2011/05/19/5	mailing-list x_refsource_MLIST x_transferred
http://secunia.com/advisories/44780	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.vupen.com/english/advisories/2011/1290	vdb-entry x_refsource_VUPEN x_transferred
http://secunia.com/advisories/44558	third-party-advisory x_refsource_SECUNIA x_transferred
http://openwall.com/lists/oss-security/2011/05/19/10	mailing-list x_refsource_MLIST x_transferred
http://mail-archives.apache.org/mod_mbox/httpd-announce/201105.mbox/%3C4DD55092.3030403%40apache.org%3E	mailing-list x_refsource_MLIST x_transferred
https://issues.apache.org/bugzilla/show_bug.cgi?id=51219	x_refsource_CONFIRM x_transferred
http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00011.html	vendor-advisory x_refsource_SUSE x_transferred

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References