EDB-41769

PoC

Apache < 2.0.64 / < 2.2.21 mod_setenvif - Integer Overflow

view exploit source exploit_dbtype dosauthor halfdogpublished 2011-11-02catalog exploit_db

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2011-4415US	low1.2	3.02% (87th)	Exploit	2011-11-08
The ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x through 2.2.21, when the mod_setenvif module is enabled, does not restrict the siz…
CVE-2011-3607US	medium4.4	4.72% (92nd)	Exploit	2011-11-08
Integer overflow in the ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x through 2.2.21, when the mod_setenvif module is enabled, allow…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.