{"api_version":"1","generated_at":"2026-07-23T05:37:20+00:00","cve":"CVE-2011-1176","urls":{"html":"https://cve.report/CVE-2011-1176","api":"https://cve.report/api/cve/CVE-2011-1176.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2011-1176","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2011-1176"},"summary":{"title":"CVE-2011-1176","description":"The configuration merger in itk.c in the Steinar H. Gunderson mpm-itk Multi-Processing Module 2.2.11-01 and 2.2.11-02 for the Apache HTTP Server does not properly handle certain configuration sections that specify NiceValue but not AssignUserID, which might allow remote attackers to gain privileges by leveraging the root uid and root gid of an mpm-itk process.","state":"PUBLISHED","assigner":"redhat","published_at":"2011-03-29 18:55:02","updated_at":"2026-04-29 01:13:23"},"problem_types":["NVD-CWE-noinfo","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.vupen.com/english/advisories/2011/0824","name":"http://www.vupen.com/english/advisories/2011/0824","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2011/0749","name":"http://www.vupen.com/english/advisories/2011/0749","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:057","name":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:057","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Support / Security / Advisories /  / MDVSA-2011:057 | Mandriva","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2011/0748","name":"http://www.vupen.com/english/advisories/2011/0748","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://openwall.com/lists/oss-security/2011/03/21/13","name":"http://openwall.com/lists/oss-security/2011/03/21/13","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"title":"oss-security - Re: CVE request: MPM-ITK module for Apache HTTPD","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/46953","name":"http://www.securityfocus.com/bid/46953","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"Apache MPM-ITK Module Security Weakness","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.debian.org/security/2011/dsa-2202","name":"http://www.debian.org/security/2011/dsa-2202","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Debian -- Security Information -- DSA-2202-1 apache2","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://openwall.com/lists/oss-security/2011/03/20/1","name":"http://openwall.com/lists/oss-security/2011/03/20/1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"title":"oss-security - CVE request: MPM-ITK module for Apache HTTPD","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=618857","name":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=618857","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"],"title":"#618857 - apache2-mpm-itk: if you do not assign a user ID, the default one from Apache is _NOT_ used. - Debian Bug report logs","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.err.no/pipermail/mpm-itk/2011-March/000393.html","name":"http://lists.err.no/pipermail/mpm-itk/2011-March/000393.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"],"title":"[mpm-itk] CVE 2011-1176: Sometimes runs as root instead of the default Apache user","mime":"text/x-diff","httpstatus":"404","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/66248","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/66248","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.err.no/pipermail/mpm-itk/2011-March/000394.html","name":"http://lists.err.no/pipermail/mpm-itk/2011-March/000394.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Third Party Advisory"],"title":"[mpm-itk] mpm-itk version 2.2.17-01 released","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-1176","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-1176","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2011","cve_id":"1176","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"apache","cpe5":"http_server","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1176","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"debian","cpe5":"debian_linux","cpe6":"5.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1176","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"debian","cpe5":"debian_linux","cpe6":"6.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1176","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"debian","cpe5":"debian_linux","cpe6":"7.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1176","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mpm-itk_project","cpe5":"mpm-itk","cpe6":"2.2.11-01","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1176","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mpm-itk_project","cpe5":"mpm-itk","cpe6":"2.2.11-02","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T22:21:32.223Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"46953","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/46953"},{"name":"MDVSA-2011:057","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"],"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:057"},{"name":"[mpm-itk] 20110321 mpm-itk version 2.2.17-01 released","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://lists.err.no/pipermail/mpm-itk/2011-March/000394.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=618857"},{"name":"apache-mtmitk-weak-security(66248)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/66248"},{"name":"ADV-2011-0824","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2011/0824"},{"name":"ADV-2011-0748","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2011/0748"},{"name":"DSA-2202","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"],"url":"http://www.debian.org/security/2011/dsa-2202"},{"name":"ADV-2011-0749","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2011/0749"},{"name":"[oss-security] 20110321 Re: CVE request: MPM-ITK module for Apache HTTPD","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://openwall.com/lists/oss-security/2011/03/21/13"},{"name":"[oss-security] 20110320 CVE request: MPM-ITK module for Apache HTTPD","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://openwall.com/lists/oss-security/2011/03/20/1"},{"name":"[mpm-itk] 20110321 CVE 2011-1176: Sometimes runs as root instead of the default Apache user","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://lists.err.no/pipermail/mpm-itk/2011-March/000393.html"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2011-03-20T00:00:00.000Z","descriptions":[{"lang":"en","value":"The configuration merger in itk.c in the Steinar H. Gunderson mpm-itk Multi-Processing Module 2.2.11-01 and 2.2.11-02 for the Apache HTTP Server does not properly handle certain configuration sections that specify NiceValue but not AssignUserID, which might allow remote attackers to gain privileges by leveraging the root uid and root gid of an mpm-itk process."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-16T14:57:01.000Z","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat"},"references":[{"name":"46953","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/46953"},{"name":"MDVSA-2011:057","tags":["vendor-advisory","x_refsource_MANDRIVA"],"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:057"},{"name":"[mpm-itk] 20110321 mpm-itk version 2.2.17-01 released","tags":["mailing-list","x_refsource_MLIST"],"url":"http://lists.err.no/pipermail/mpm-itk/2011-March/000394.html"},{"tags":["x_refsource_CONFIRM"],"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=618857"},{"name":"apache-mtmitk-weak-security(66248)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/66248"},{"name":"ADV-2011-0824","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2011/0824"},{"name":"ADV-2011-0748","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2011/0748"},{"name":"DSA-2202","tags":["vendor-advisory","x_refsource_DEBIAN"],"url":"http://www.debian.org/security/2011/dsa-2202"},{"name":"ADV-2011-0749","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2011/0749"},{"name":"[oss-security] 20110321 Re: CVE request: MPM-ITK module for Apache HTTPD","tags":["mailing-list","x_refsource_MLIST"],"url":"http://openwall.com/lists/oss-security/2011/03/21/13"},{"name":"[oss-security] 20110320 CVE request: MPM-ITK module for Apache HTTPD","tags":["mailing-list","x_refsource_MLIST"],"url":"http://openwall.com/lists/oss-security/2011/03/20/1"},{"name":"[mpm-itk] 20110321 CVE 2011-1176: Sometimes runs as root instead of the default Apache user","tags":["mailing-list","x_refsource_MLIST"],"url":"http://lists.err.no/pipermail/mpm-itk/2011-March/000393.html"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secalert@redhat.com","ID":"CVE-2011-1176","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The configuration merger in itk.c in the Steinar H. Gunderson mpm-itk Multi-Processing Module 2.2.11-01 and 2.2.11-02 for the Apache HTTP Server does not properly handle certain configuration sections that specify NiceValue but not AssignUserID, which might allow remote attackers to gain privileges by leveraging the root uid and root gid of an mpm-itk process."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"46953","refsource":"BID","url":"http://www.securityfocus.com/bid/46953"},{"name":"MDVSA-2011:057","refsource":"MANDRIVA","url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:057"},{"name":"[mpm-itk] 20110321 mpm-itk version 2.2.17-01 released","refsource":"MLIST","url":"http://lists.err.no/pipermail/mpm-itk/2011-March/000394.html"},{"name":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=618857","refsource":"CONFIRM","url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=618857"},{"name":"apache-mtmitk-weak-security(66248)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/66248"},{"name":"ADV-2011-0824","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2011/0824"},{"name":"ADV-2011-0748","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2011/0748"},{"name":"DSA-2202","refsource":"DEBIAN","url":"http://www.debian.org/security/2011/dsa-2202"},{"name":"ADV-2011-0749","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2011/0749"},{"name":"[oss-security] 20110321 Re: CVE request: MPM-ITK module for Apache HTTPD","refsource":"MLIST","url":"http://openwall.com/lists/oss-security/2011/03/21/13"},{"name":"[oss-security] 20110320 CVE request: MPM-ITK module for Apache HTTPD","refsource":"MLIST","url":"http://openwall.com/lists/oss-security/2011/03/20/1"},{"name":"[mpm-itk] 20110321 CVE 2011-1176: Sometimes runs as root instead of the default Apache user","refsource":"MLIST","url":"http://lists.err.no/pipermail/mpm-itk/2011-March/000393.html"}]}}}},"cveMetadata":{"assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","assignerShortName":"redhat","cveId":"CVE-2011-1176","datePublished":"2011-03-29T18:00:00.000Z","dateReserved":"2011-03-03T00:00:00.000Z","dateUpdated":"2024-08-06T22:21:32.223Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2011-03-29 18:55:02","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["NVD-CWE-noinfo","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mpm-itk_project:mpm-itk:2.2.11-01:*:*:*:*:*:*:*","matchCriteriaId":"6720BE80-ADB0-4B14-BAD8-D89D9DE7A645"},{"vulnerable":true,"criteria":"cpe:2.3:a:mpm-itk_project:mpm-itk:2.2.11-02:*:*:*:*:*:*:*","matchCriteriaId":"07684254-212B-4346-BE15-FF3767958979"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","matchCriteriaId":"5A6CD1F4-4C0E-4989-A2B3-DC086E8E80A3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"036E8A89-7A16-411F-9D31-676313BB7244"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2011","CveId":"1176","Ordinal":"1","Title":"CVE-2011-1176","CVE":"CVE-2011-1176","Year":"2011"},"notes":[{"CveYear":"2011","CveId":"1176","Ordinal":"1","NoteData":"The configuration merger in itk.c in the Steinar H. Gunderson mpm-itk Multi-Processing Module 2.2.11-01 and 2.2.11-02 for the Apache HTTP Server does not properly handle certain configuration sections that specify NiceValue but not AssignUserID, which might allow remote attackers to gain privileges by leveraging the root uid and root gid of an mpm-itk process.","Type":"Description","Title":"CVE-2011-1176"},{"CveYear":"2011","CveId":"1176","Ordinal":"2","NoteData":"2011-03-29","Type":"Other","Title":"Published"},{"CveYear":"2011","CveId":"1176","Ordinal":"3","NoteData":"2017-08-16","Type":"Other","Title":"Modified"}]}}}