Vulnerability 34965 - CERT Civis.Net

Vulnerability Name:

CCN-34965

Published:

2007-06-20

Updated:

2007-06-20

Summary:

The Apache HTTP Server could allow an authenticated remote attacker with WP (worker process) process privileges to obtain sensitive information, caused by a vulnerability in the MPM service. Plaintext server keys and certificates are stored in the WP heap memory. An attacker could exploit this vulnerability to obtain server certificates and keys.

CVSS v3 Severity:

3.5 Low (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): Low User Interaction (UI): Required
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): None Availibility (A): None

CVSS v2 Severity:

4.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N)
3.4 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N/E:POC/RL:U/RC:UR)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): Partial Integrity (I): None Availibility (A): None

Vulnerability Consequences:

Obtain Information

References:

Source: CCN
Type: Full-Disclosure Mailing List, Tue Jun 19 2007 - 18:50:36 CDT
Apache Prefork MPM vulnerabilities - Report

Source: CCN
Type: PSNC Security Team Web site
Apache Prefork MPM vulnerabilities

Source: CCN
Type: Apache HTTP Server Web site
Welcome! - The Apache Software Foundation

Source: XF
Type: UNKNOWN
apache-mpm-information-disclosure(34965)

Vulnerable Configuration:

Configuration CCN 1:

cpe:/a:apache:http_server:2.0.28:beta:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:1.3.6:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:1.3.9:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.38:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.39:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.42:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.47:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.60:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.49:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.48:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.51:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:1.3.33:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.52:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.40:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:1.3.37:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.59:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.2.4:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.46:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.55:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.2.3:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.2.0:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.2.2:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.2.6:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:1.3.39:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:1.3.3:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:1.3.36:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:1.3.35:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:1.3.34:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:1.3.32:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:1.3.31:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:1.3.4:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.28:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.32:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.35:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.36:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.37:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.41:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:1.3.30:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:1.3.38:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:1.3.5:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:1.3.7:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:1.3.8:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.32:beta:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.34:beta:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.43:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.44:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.45:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.50:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.53:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.54:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.56:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.57:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.58:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.60:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.61:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.9:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.1:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.1.1:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.1.2:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.1.3:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.1.4:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.1.5:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.1.6:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.1.7:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.1.8:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.2:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.2.1:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.3.0:*:*:*:*:*:*:*

Denotes that component is vulnerable