Severity : Medium Published : 2011-11-29 Modified : 2012-02-24 Base Score : 4.3 Details : The mod_proxy module in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x before 2.2.18, when the Revision 1179239 patch is in place, does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers by using the HTTP/0.9 protocol with a malformed URI containing an initial @ (at sign) character. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-3368. Product/Version : CGE 5.x   Mobilinux 5.x

CVE-2011-4914 CVE-2011-4913 CVE-2011-4885 CVE-2011-4619 CVE-2011-4578 CVE-2011-4577 CVE-2011-4576 CVE-2011-4566 CVE-2011-4330 CVE-2011-4324 CVE-2011-4317 CVE-2011-4313 CVE-2011-4132 CVE-2011-4130 CVE-2011-4127 CVE-2011-4110 CVE-2011-4109 CVE-2011-4108 CVE-2011-4081 CVE-2011-4077 CVE-2011-4029 CVE-2011-4028 CVE-2011-3639 CVE-2011-3607 CVE-2011-3389 CVE-2011-3378 CVE-2011-3368 CVE-2011-3363 CVE-2011-3359 CVE-2011-3353 CVE-2011-3348 CVE-2011-3210 CVE-2011-3209 CVE-2011-3192 CVE-2011-3191 CVE-2011-3188 CVE-2011-3149 CVE-2011-3148 CVE-2011-3026 CVE-2011-2898 CVE-2011-2896 CVE-2011-2895 CVE-2011-2834 CVE-2011-2724 CVE-2011-2699 CVE-2011-2695 CVE-2011-2694 CVE-2011-2692 CVE-2011-2691 CVE-2011-2690 CVE-2011-2534 CVE-2011-2525 CVE-2011-2522 CVE-2011-2501 CVE-2011-2496 CVE-2011-2494 CVE-2011-2492 CVE-2011-2491 CVE-2011-2484 CVE-2011-2213 CVE-2011-2212 CVE-2011-2202 CVE-2011-2192 CVE-2011-2182 CVE-2011-2022 CVE-2011-1945 CVE-2011-1944 CVE-2011-1938 CVE-2011-1928 CVE-2011-1833 CVE-2011-1776 CVE-2011-1767 CVE-2011-1760 CVE-2011-1759 CVE-2011-1751 CVE-2011-1750 CVE-2011-1747 CVE-2011-1746 CVE-2011-1745 CVE-2011-1677 CVE-2011-1676 CVE-2011-1675 CVE-2011-1659 CVE-2011-1658 CVE-2011-1593 CVE-2011-1592 CVE-2011-1591 CVE-2011-1590 CVE-2011-1577 CVE-2011-1573 CVE-2011-1495 CVE-2011-1494 CVE-2011-1493 CVE-2011-1477 CVE-2011-1182 CVE-2011-1173 CVE-2011-1172 CVE-2011-1171 CVE-2011-1170 CVE-2011-1163 CVE-2011-1155 CVE-2011-1098 CVE-2011-1095 CVE-2011-1093 CVE-2011-1090 CVE-2011-1082 CVE-2011-1071 CVE-2011-1044 CVE-2011-1017 CVE-2011-1013 CVE-2011-1012 CVE-2011-1010 CVE-2011-0997 CVE-2011-0719 CVE-2011-0711 CVE-2011-0695 CVE-2011-0539 CVE-2011-0536 CVE-2011-0521 CVE-2011-0465 CVE-2011-0463 CVE-2011-0419 CVE-2011-0014