cve/2011/CVE-2011-3348.md

CVE-2011-3348

Description

The mod_proxy_ajp module in the Apache HTTP Server before 2.2.21, when used with mod_proxy_balancer in certain configurations, allows remote attackers to cause a denial of service (temporary "error state" in the backend server) via a malformed HTTP request.

POC

Reference

• http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html

Github

• https://github.com/8ctorres/SIND-Practicas
• https://github.com/ARPSyndicate/cvemon
• https://github.com/GiJ03/ReconScan
• https://github.com/Live-Hack-CVE/CVE-2011-3348
• https://github.com/MrFrozenPepe/Pentest-Cheetsheet
• https://github.com/RoliSoft/ReconScan
• https://github.com/SecureAxom/strike
• https://github.com/issdp/test
• https://github.com/matoweb/Enumeration-Script
• https://github.com/xxehacker/strike