Check Point Advisories

Preemptive Protection against Apache HTTPD mod_proxy_ajp Denial of Service (CVE-2011-3348)

Check Point Reference:	CPAI-2011-553
Date Published:	6 Dec 2011
Severity:	High
Last Updated:	Saturday 01 January, 2011
Source:	Secunia Advisory: 46013
Industry Reference:	CVE-2011-3348
Protection Provided by:
Who is Vulnerable?	Apache Software Foundation HTTP Server 2.2.12 - 2.2.20
Vulnerability Description	A denial of service vulnerability has been reported in Apache httpd server.
Vulnerability Details	The vulnerability is due to insufficient validation of HTTP requests sent to the Apache server. A remote attacker could exploit this vulnerability by sending a specially crafted HTTP request to an affected server. Successful exploitation could cause the server to crash, resulting in a denial of service condition.