Vulnetix
Try Vulnetix Request Demo
CVE-2011-1176 PUBLISHED CVSS 4.300000190734863 MEDIUM

The configuration merger in itk.c in the Steinar H. Gunderson mpm-itk Multi-Processing Module 2.2.11-01 and 2.2.11-02 for the Apache HTTP Server does not properly handle certain configuration sections that specify NiceValue but not AssignUserID, which might allow remote attackers to gain privileges by leveraging the root uid and root gid of an mpm-itk process.

EPSS 0.96% · 76.3th percentile

Risk Scores

CVSS v2.0
4.300000190734863
EPSS Score
0.96%
76.3th percentile

Affected Products

VendorProductVersions
debiandebian_linux5.0, 6.0, 7.0
mpm-itk_projectmpm-itk2.2.11-01, 2.2.11-02
n/an/an/a

Timeline

References

Open in Interactive Console →