CVE-2011-1176 The configuration merger in itk.c in the Steinar H. Gunderson mpm-itk Multi-Processing Module 2.2.11-01 and 2.2.11-02 for the Apache HTTP Server does not properly handle certain configuration sections...
MediumCVSS 4.3
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The configuration merger in itk.c in the Steinar H. Gunderson mpm-itk Multi-Processing Module 2.2.11-01 and 2.2.11-02 for the Apache HTTP Server does not properly handle certain configuration sections that specify NiceValue but not AssignUserID, which might allow remote attackers to gain privileges by leveraging the root uid and root gid of an mpm-itk process.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mpm-itk project mpm-itk | = 2.2.11-01 | No fix listed |
| mpm-itk project mpm-itk | = 2.2.11-02 | No fix listed |
| debian linux | = 5.0 | No fix listed |
| debian linux | = 6.0 | No fix listed |
| debian linux | = 7.0 | No fix listed |
| debian/apache2(Debian:12) | < 2.2.17-2 | 2.2.17-2 |
| debian/apache2(Debian:13) | < 2.2.17-2 | 2.2.17-2 |
| debian/apache2(Debian:14) | < 2.2.17-2 | 2.2.17-2 |
References
- bugs.debian.org issue-tracking patch third-party-advisory
- [mpm-itk] 20110321 CVE 2011-1176: Sometimes runs as root instead of the default Apache user mailing-list patch third-party-advisory
- [mpm-itk] 20110321 mpm-itk version 2.2.17-01 released mailing-list release-notes third-party-advisory
- [oss-security] 20110320 CVE request: MPM-ITK module for Apache HTTPD mailing-list third-party-advisory
- [oss-security] 20110321 Re: CVE request: MPM-ITK module for Apache HTTPD mailing-list third-party-advisory
- DSA-2202 third-party-advisory vendor-advisory
- MDVSA-2011:057 third-party-advisory vendor-advisory
- 46953 third-party-advisory vdb-entry
- ADV-2011-0748 third-party-advisory vdb-entry
- ADV-2011-0749 third-party-advisory vdb-entry
- ADV-2011-0824 third-party-advisory vdb-entry
- apache-mtmitk-weak-security(66248) third-party-advisory vdb-entry
- Debian Security Tracker CVE-2011-1176 vendor-advisory
- bugs.debian.org issue-tracking