CVE-2012-4001

Currently unrated

Key Information:

Vendor
Google
Status
Mod Pagespeed
Vendor
CVE Published:
15 September 2012

Summary

The mod_pagespeed module before 0.10.22.6 for the Apache HTTP Server does not properly verify its host name, which allows remote attackers to trigger HTTP requests to arbitrary hosts via unspecified vectors, as demonstrated by requests to intranet servers.

References

https://developers.google.com/speed/docs/mod_pagespeed/CV...
x_refsource_CONFIRM
https://developers.google.com/speed/docs/mod_pagespeed/an...
x_refsource_CONFIRM

Timeline

  • Vulnerability Reserved

  • Vulnerability published

Collectors

NVD DatabaseMitre Database
.