Vulnerability 34966 - CERT Civis.Net

Vulnerability Name:

CCN-34966

Published:

2007-06-20

Updated:

2007-06-20

Summary:

The Apache HTTP Server could allow an authenticated remote attacker with WP (worker process) process privileges to spoof arbitrary content. An attacker could exploit this vulnerability by sending specially-crafted functions to the apr_global_hook_pool to spoof arbitrary content on the server.

CVSS v3 Severity:

3.5 Low (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): Low User Interaction (UI): Required
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): Low Availibility (A): None

CVSS v2 Severity:

4.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:S/C:N/I:P/A:N)
3.4 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:U/RC:UR)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): None Integrity (I): Partial Availibility (A): None

Vulnerability Consequences:

Gain Privileges

References:

Source: CCN
Type: Full-Disclosure Mailing List, Tue Jun 19 2007 - 18:50:36 CDT
Apache Prefork MPM vulnerabilities - Report

Source: CCN
Type: PSNC Security Team Web site
Apache Prefork MPM vulnerabilities

Source: CCN
Type: Apache HTTP Server Web site
Welcome! - The Apache Software Foundation

Source: XF
Type: UNKNOWN
apache-mpm-content-spoofing(34966)

Vulnerable Configuration:

Configuration CCN 1:

cpe:/a:apache:http_server:2.0.28:beta:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:1.3.6:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:1.3.9:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.38:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.39:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.42:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.47:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.60:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.49:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.48:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.51:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:1.3.33:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.52:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.40:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:1.3.37:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.59:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.2.4:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.46:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.55:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.2.3:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.2.0:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.2.2:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.2.6:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:1.3.39:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:1.3.3:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:1.3.36:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:1.3.35:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:1.3.34:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:1.3.32:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:1.3.31:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:1.3.4:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.28:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.32:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.35:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.36:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.37:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.41:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:1.3.30:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:1.3.38:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:1.3.5:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:1.3.7:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:1.3.8:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.32:beta:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.34:beta:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.43:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.44:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.45:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.50:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.53:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.54:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.56:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.57:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.58:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.60:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.61:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.9:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.1:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.1.1:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.1.2:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.1.3:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.1.4:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.1.5:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.1.6:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.1.7:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.1.8:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.2:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.2.1:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.3.0:*:*:*:*:*:*:*

Denotes that component is vulnerable