Apache HTTP Server Byte Range DoS Vulnerability (CVE-2011-3192) Scanner

Details
Stay Up To Date
Asset Type

DOMAIN,IP

Need Membership

Yes

Asset Verify

Yes

API Support

Yes

Estimate Time (Second)

15

Apache HTTP Server Byte Range DoS Vulnerability (CVE-2011-3192) Scanner Detail

The web server running on the remote host is affected by a denial of service vulnerability.

Detects a denial of service vulnerability in the way the Apache web server handles requests for multiple overlapping/simple ranges of a page.

References:

  • https://seclists.org/fulldisclosure/2011/Aug/175
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3192
  • https://www.tenable.com/plugins/nessus/55976

Some Advice for Common Problems

Upgrade to Apache httpd latest version. Alternatively, apply one of the workarounds in Apache's advisories for CVE-2011-3192. 

Community Discussions

Need a Full Assesment?

Get help from professional hackers. Learn about our penetration test service now!

Request Pentest Service