MEDIUM
httpd: cookie exposure due to error responses
Published Jan 28, 2012
4.3
MEDIUMCVSS 2.0
EPSS 82.20%
Description
protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construction of Bad Request (aka 400) error documents, which allows remote attackers to obtain the values of HTTPOnly cookies via vectors involving a (1) long or (2) malformed header in conjunction with crafted web script.
Affected products
No data.
Configuration 1
OR
- ≥ 2.0.0 · < 2.0.65
- ≥ 2.2.0 · < 2.2.22
Configuration 2
OR
- 5.0
- 6.0
- 7.0
Configuration 3
OR
- 11.4
- 10
- 10
Configuration 4
OR
- 2.0
- 6.0
- 6.2
- 6.0
- 6.0
Configuration 5
AND
- 1.0.0
Running on/with
OR
- 5.0
- 6.0
No data.
Red Hat Enterprise Linux 5
httpd-0:2.2.3-63.el5_8.1
Fixed · RHSA-2012:0323
Red Hat Enterprise Linux 6
httpd-0:2.2.15-15.el6_2.1
Fixed · RHSA-2012:0128
Red Hat JBoss Enterprise Web Server 1 for RHEL 5
httpd-0:2.2.17-15.4.ep5.el5
Fixed · RHSA-2012:0542
Red Hat JBoss Enterprise Web Server 1 for RHEL 6
httpd-0:2.2.17-15.4.ep5.el6
Fixed · RHSA-2012:0542
Red Hat JBoss Web Server 1.0
n/a
Fixed · RHSA-2012:0543
Red Hat Directory Server 8
httpd
Will not fix
Red Hat Enterprise Linux 4
httpd
Will not fix
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 5 | httpd-0:2.2.3-63.el5_8.1 | Fixed | RHSA-2012:0323 |
| Red Hat Enterprise Linux 6 | httpd-0:2.2.15-15.el6_2.1 | Fixed | RHSA-2012:0128 |
| Red Hat JBoss Enterprise Web Server 1 for RHEL 5 | httpd-0:2.2.17-15.4.ep5.el5 | Fixed | RHSA-2012:0542 |
| Red Hat JBoss Enterprise Web Server 1 for RHEL 6 | httpd-0:2.2.17-15.4.ep5.el6 | Fixed | RHSA-2012:0542 |
| Red Hat JBoss Web Server 1.0 | n/a | Fixed | RHSA-2012:0543 |
| Red Hat Directory Server 8 | httpd | Will not fix | n/a |
| Red Hat Enterprise Linux 4 | httpd | Will not fix | n/a |
No package ranges for this CVE.
Remediation
Red Hat statement
This issue affects httpd packages as shipped with Red Hat Enterprise Linux 3 and 4, which are now in the Extended Life Phase of their life cycle. Therefore this issue is not planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/
Red Hat mitigation
As noted in the original reporter's advisory (see comment #5), this issue can be mitigated by using a custom ErrorDocument setting, such as: ErrorDocument 400 "Bad Request" http://httpd.apache.org/docs/2.2/mod/core.html#errordocument It should be noted that ErrorDocument setting using path or external URL does not mitigate this issue. It should also be noted that this is not an issue by itself. This can only be exploited via some other cross-site scripting (XSS) flaw found in a web application running on the server and may allow injected JavaScript to gain access to HttpOnly cookies, if the application uses this protection for its cookies.
Metrics
No CVSS v4.0 score for this CVE.
No CVSS v3.1 score for this CVE.
No CVSS v3.0 score for this CVE.
4.3 MEDIUM NVD
AV:N/AC:M/Au:N/C:P/I:N/A:N
Access Vector Network
Access Complexity Medium
Authentication None
Confidentiality Impact Partial
Integrity Impact None
Availability Impact None
This CVE is not in the KEV list.
No CISA SSVC assessment for this CVE yet.
82.20% 0.82198
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.
EPSS probability 0.82198
Score over time
2022–2026- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (52 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 1, 2026 | 82.20% (0.82198) | 99.65th | v5 (v2026.06.15) |
| Jun 15, 2026 | 82.76% (0.82756) | 99.63th | v5 (v2026.06.15) |
| Jun 8, 2026 | 23.64% (0.23641) | 96.10th | v4 (v2025.03.14) |
| May 17, 2026 | 33.85% (0.33846) | 97.01th | v4 (v2025.03.14) |
| Mar 4, 2026 | 55.95% (0.55955) | 98.05th | v4 (v2025.03.14) |
| Mar 1, 2026 | 67.33% (0.67327) | 98.54th | v4 (v2025.03.14) |
| Feb 4, 2026 | 65.53% (0.65535) | 98.44th | v4 (v2025.03.14) |
| Feb 1, 2026 | 67.33% (0.67327) | 98.53th | v4 (v2025.03.14) |
| Jan 4, 2026 | 65.53% (0.65535) | 98.42th | v4 (v2025.03.14) |
| Jan 1, 2026 | 67.33% (0.67327) | 98.52th | v4 (v2025.03.14) |
| Dec 28, 2025 | 65.53% (0.65535) | 98.42th | v4 (v2025.03.14) |
| Dec 27, 2025 | 62.92% (0.62917) | 98.32th | v4 (v2025.03.14) |
| Dec 19, 2025 | 65.53% (0.65535) | 98.42th | v4 (v2025.03.14) |
| Dec 4, 2025 | 70.50% (0.70503) | 98.62th | v4 (v2025.03.14) |
| Dec 1, 2025 | 72.06% (0.72064) | 98.69th | v4 (v2025.03.14) |
| Nov 4, 2025 | 70.50% (0.70503) | 98.62th | v4 (v2025.03.14) |
| Nov 1, 2025 | 72.06% (0.72064) | 98.69th | v4 (v2025.03.14) |
| Oct 28, 2025 | 70.50% (0.70503) | 98.61th | v4 (v2025.03.14) |
| Oct 27, 2025 | 68.20% (0.68199) | 98.53th | v4 (v2025.03.14) |
| Oct 4, 2025 | 70.50% (0.70503) | 98.63th | v4 (v2025.03.14) |
| Oct 1, 2025 | 72.06% (0.72064) | 98.70th | v4 (v2025.03.14) |
| Sep 28, 2025 | 68.20% (0.68199) | 98.56th | v4 (v2025.03.14) |
| Sep 4, 2025 | 74.64% (0.74639) | 98.82th | v4 (v2025.03.14) |
| Sep 1, 2025 | 82.46% (0.82458) | 99.20th | v4 (v2025.03.14) |
| Aug 4, 2025 | 74.64% (0.74639) | 98.80th | v4 (v2025.03.14) |
| Aug 1, 2025 | 82.46% (0.82458) | 99.19th | v4 (v2025.03.14) |
| Jul 30, 2025 | 74.64% (0.74639) | 98.80th | v4 (v2025.03.14) |
| Jul 4, 2025 | 76.48% (0.76477) | 98.87th | v4 (v2025.03.14) |
| Jul 1, 2025 | 83.19% (0.83186) | 99.21th | v4 (v2025.03.14) |
| Jun 4, 2025 | 76.48% (0.76477) | 98.87th | v4 (v2025.03.14) |
| Jun 1, 2025 | 83.19% (0.83186) | 99.21th | v4 (v2025.03.14) |
| May 21, 2025 | 76.48% (0.76477) | 98.86th | v4 (v2025.03.14) |
| May 15, 2025 | 75.29% (0.75292) | 98.81th | v4 (v2025.03.14) |
| May 4, 2025 | 77.51% (0.77509) | 98.91th | v4 (v2025.03.14) |
| May 1, 2025 | 83.86% (0.83858) | 99.23th | v4 (v2025.03.14) |
| Apr 11, 2025 | 77.51% (0.77509) | 98.94th | v4 (v2025.03.14) |
| Mar 30, 2025 | 80.92% (0.80919) | 99.10th | v4 (v2025.03.14) |
| Mar 29, 2025 | 83.21% (0.83215) | 99.08th | v4 (v2025.03.14) |
| Mar 17, 2025 | 80.92% (0.80919) | 99.11th | v4 (v2025.03.14) |
| Dec 17, 2024 | 57.44% (0.57443) | 97.84th | v3 (v2023.03.01) |
| Jun 5, 2024 | 71.70% (0.71697) | 98.02th | v3 (v2023.03.01) |
| Feb 16, 2024 | 73.96% (0.73964) | 98.02th | v3 (v2023.03.01) |
| Feb 8, 2024 | 70.73% (0.70727) | 97.91th | v3 (v2023.03.01) |
| Dec 23, 2023 | 76.12% (0.76123) | 97.89th | v3 (v2023.03.01) |
| Nov 8, 2023 | 84.01% (0.84006) | 98.15th | v3 (v2023.03.01) |
| Aug 27, 2023 | 96.72% (0.96718) | 99.50th | v3 (v2023.03.01) |
| Jun 24, 2023 | 96.47% (0.96474) | 99.34th | v3 (v2023.03.01) |
| Apr 22, 2023 | 96.20% (0.96201) | 99.20th | v3 (v2023.03.01) |
| Mar 7, 2023 | 96.82% (0.96817) | 99.42th | v3 (v2023.03.01) |
| Mar 6, 2023 | 73.46% (0.73462) | 99.29th | v2 (v2022.01.01) |
| Apr 12, 2022 | 73.46% (0.73462) | 99.20th | v2 (v2022.01.01) |
| Feb 4, 2022 | 74.14% (0.74136) | 99.15th | v2 (v2022.01.01) |
Weaknesses (0)
No CWE recorded.
References (48)
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 vendor-advisoryx_refsource_HPBroken Link
- http://httpd.apache.org/security/vulnerabilities_22.html x_refsource_CONFIRMVendor Advisory
- http://kb.juniper.net/JSA10585 x_refsource_CONFIRMThird Party Advisory
- http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html vendor-advisoryx_refsource_APPLEBroken LinkMailing List
- http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00026.html vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00002.html vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory
- http://marc.info/?l=bugtraq&m=133294460209056&w=2 vendor-advisoryx_refsource_HPIssue TrackingMailing ListThird Party Advisory
- http://marc.info/?l=bugtraq&m=133494237717847&w=2 vendor-advisoryx_refsource_HPIssue TrackingMailing ListThird Party Advisory
- http://marc.info/?l=bugtraq&m=133951357207000&w=2 vendor-advisoryx_refsource_HPIssue TrackingMailing ListThird Party Advisory
- http://marc.info/?l=bugtraq&m=136441204617335&w=2 vendor-advisoryx_refsource_HPIssue TrackingMailing ListThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2012-0128.html vendor-advisoryx_refsource_REDHATThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2012-0542.html vendor-advisoryx_refsource_REDHATThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2012-0543.html vendor-advisoryx_refsource_REDHATThird Party Advisory
- http://secunia.com/advisories/48551 third-party-advisoryx_refsource_SECUNIANot Applicable
- http://support.apple.com/kb/HT5501 x_refsource_CONFIRMThird Party Advisory
- http://svn.apache.org/viewvc?view=revision&revision=1235454 x_refsource_CONFIRMPatchVendor Advisory
- http://www.debian.org/security/2012/dsa-2405 vendor-advisoryx_refsource_DEBIANThird Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:012 vendor-advisoryx_refsource_MANDRIVABroken Link
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 vendor-advisoryx_refsource_MANDRIVABroken Link
- http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html x_refsource_CONFIRMThird Party Advisory
- http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html x_refsource_CONFIRMThird Party Advisory
- http://www.securityfocus.com/bid/51706 vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
- https://access.redhat.com/security/cve/CVE-2012-0053 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=785069 x_refsource_CONFIRMIssue TrackingThird Party Advisory
- https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/r05b5357d1f6bd106f41541ee7d87aafe3f5ea4dc3e9bde5ce09baff8%40%3Ccvs.httpd.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/r1d201e3da31a2c8aa870c8314623caef7debd74a13d0f25205e26f15%40%3Ccvs.httpd.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/r9b4b963760a3cb5a4a70c902f325c6c0337fe51d5b8570416f8f8729%40%3Ccvs.httpd.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E mailing-listx_refsource_MLIST
- https://nvd.nist.gov/vuln/detail/CVE-2012-0053
- https://www.cve.org/CVERecord?id=CVE-2012-0053
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Jan 28, 2012
Updated Aug 6, 2024
Reserved Dec 7, 2011
Link CVE-2012-0053
CISA Vulnrichment
Updated n/a