What is CVE-2012-4001?

CVE-2012-4001 is a vulnerability in Apache HTTP Server, classified under Improper Input Validation. Published 2012-09-15.

Is CVE-2012-4001 known to be exploited?

5 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Improper input validation in Apache HTTP Server

CVE-2012-4001

The mod_pagespeed module before 0.10.22.6 for the Apache HTTP Server does not properly verify its host name, which allows remote attackers to trigger HTTP requests to arbitrary hosts via unspecified vectors, as demonstrated by requests to intranet servers.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.007 (48.7th percentile) — read the EPSS interpretation.

Affected products

Apache Http_server
Google Mod_pagespeed — versions 0.10.19.1
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

Public proof-of-concept exploits

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2012-4001?: CVE-2012-4001 is a vulnerability in Apache HTTP Server, classified under Improper Input Validation. Published 2012-09-15.
Is CVE-2012-4001 known to be exploited?: 5 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.