Security For Everyone

CVE-2011-3368 Scanner

Detects 'Reverse Proxy Bypass' vulnerability in Apache HTTP Server affects v. 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21.

Short Info

Level

Medium

Single Scan

Can be used by

Asset Owner

Estimated Time

15 seconds

Time Interval

30 days

Scan only one

Domain, IPv4, Subdomain

Toolbox

-

The Apache HTTP Server is a popular web server software used by millions of websites worldwide. It is a free, open-source software that is highly scalable and customizable, making it a preferred choice for businesses of all sizes. With features like SSL/TLS encryption, virtual hosting, and secure communication protocols, Apache HTTP Server is a reliable and secure option for delivering web content to users.

One of the vulnerabilities detected in this product is CVE-2011-3368. This vulnerability affects versions 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 of Apache HTTP Server, and it is caused by a flaw in the mod_proxy module. The module does not properly interact with the use of RewriteRule and ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an initial @ (at sign) character.

This vulnerability can lead to various security issues for businesses. For instance, a hacker can exploit this vulnerability to gain unauthorized access to sensitive data, including financial records, personal information, and trade secrets. In addition, they can use this vulnerability to execute arbitrary code on the affected server and compromise the entire network. It is, therefore, important to take precautions to protect against this vulnerability.

Thanks to the pro features of the s4e.io platform, those who read this article can easily and quickly learn about vulnerabilities in their digital assets. The platform provides a comprehensive vulnerability assessment of websites and web applications, including the Apache HTTP Server, to identify security loopholes, and recommend remediation strategies. Users can also utilize the platform's security recommendations and best practices to strengthen their cybersecurity posture and protect their digital assets from potential attacks.

REFERENCES

Get started to protecting your Free Full Security Scan

Start trial See the plans