What is the severity of CVE-2012-0883?

CVE-2012-0883 has a medium severity rating due to its potential to allow local users to exploit the vulnerability for privilege escalation.

How do I fix CVE-2012-0883?

To fix CVE-2012-0883, update to Apache HTTP Server version 2.4.2 or later, or ensure that the LD_LIBRARY_PATH does not contain zero-length directory entries.

Which versions of Apache HTTP Server are affected by CVE-2012-0883?

CVE-2012-0883 affects Apache HTTP Server versions prior to 2.4.2, as well as versions 2.2.0 through 2.2.23.

Can CVE-2012-0883 be exploited remotely?

No, CVE-2012-0883 can only be exploited locally by users who have access to execute the Apache HTTP Server.

What type of attack does CVE-2012-0883 facilitate?

CVE-2012-0883 facilitates attacks where local users can use a Trojan horse dynamic shared object (DSO) to gain elevated privileges.

Vulnerability/
CVE-2012-0883

medium

6.9

18/4/2012

6/8/2024

CVE-2012-0883

First published: Wed Apr 18 2012(Updated: )

envvars (aka envvars-std) in the Apache HTTP Server before 2.4.2 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse DSO in the current working directory during execution of apachectl.

Credit: secalert@redhat.com

Affected Software	Affected Version	How to fix
Apache HTTP Server	>=2.2.0<2.2.23
Apache HTTP Server	=2.4.1
openSUSE	=11.4
openSUSE	=12.1

Remedy

http://svn.apache.org/viewvc?view=revision&revision=1296428

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2012-0883?
CVE-2012-0883 has a medium severity rating due to its potential to allow local users to exploit the vulnerability for privilege escalation.
How do I fix CVE-2012-0883?
To fix CVE-2012-0883, update to Apache HTTP Server version 2.4.2 or later, or ensure that the LD_LIBRARY_PATH does not contain zero-length directory entries.
Which versions of Apache HTTP Server are affected by CVE-2012-0883?
CVE-2012-0883 affects Apache HTTP Server versions prior to 2.4.2, as well as versions 2.2.0 through 2.2.23.
Can CVE-2012-0883 be exploited remotely?
No, CVE-2012-0883 can only be exploited locally by users who have access to execute the Apache HTTP Server.
What type of attack does CVE-2012-0883 facilitate?
CVE-2012-0883 facilitates attacks where local users can use a Trojan horse dynamic shared object (DSO) to gain elevated privileges.

agent/type
agent/severity
agent/remedy
agent/author
agent/description
collector/mitre-cve
source/MITRE
agent/references
agent/last-modified-date
agent/first-publish-date
agent/event
agent/softwarecombine
agent/source
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
vendor/apache
canonical/apache http server
version/apache http server/2.2.0
version/apache http server/2.4.1
vendor/opensuse
canonical/opensuse
version/opensuse/11.4
version/opensuse/12.1

Frequently Asked Questions

What is the severity of CVE-2012-0883?
CVE-2012-0883 has a medium severity rating due to its potential to allow local users to exploit the vulnerability for privilege escalation.
How do I fix CVE-2012-0883?
To fix CVE-2012-0883, update to Apache HTTP Server version 2.4.2 or later, or ensure that the LD_LIBRARY_PATH does not contain zero-length directory entries.
Which versions of Apache HTTP Server are affected by CVE-2012-0883?
CVE-2012-0883 affects Apache HTTP Server versions prior to 2.4.2, as well as versions 2.2.0 through 2.2.23.
Can CVE-2012-0883 be exploited remotely?
No, CVE-2012-0883 can only be exploited locally by users who have access to execute the Apache HTTP Server.
What type of attack does CVE-2012-0883 facilitate?
CVE-2012-0883 facilitates attacks where local users can use a Trojan horse dynamic shared object (DSO) to gain elevated privileges.

CVE-2012-0883

Remedy

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2012-0883?

How do I fix CVE-2012-0883?

Which versions of Apache HTTP Server are affected by CVE-2012-0883?

Can CVE-2012-0883 be exploited remotely?

What type of attack does CVE-2012-0883 facilitate?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2012-0883?

How do I fix CVE-2012-0883?

Which versions of Apache HTTP Server are affected by CVE-2012-0883?

Can CVE-2012-0883 be exploited remotely?

What type of attack does CVE-2012-0883 facilitate?