CVE-2011-4082

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

A local file inclusion flaw was found in the way the phpLDAPadmin before 0.9.8 processed certain values of the "Accept-Language" HTTP header. A remote attacker could use this flaw to cause a denial of service via specially-crafted request.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-400

Affected software

No affected versions have been published.

Timeline

Published
Nov 26, 2019
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2011

CVE-2011-40834.3The sosreport utility in the Red Hat sos package before 1.7-9 and 2.x before 2.2-17 includes (1) Certificate-based Red Hat Network private eCVE-2011-40856.8The servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2, SOA Platform before 5.2.0, BRMS Platform beforCVE-2011-40864.9The journal_unmap_buffer function in fs/jbd2/transaction.c in the Linux kernel before 3.3.1 does not properly handle the _Delay and _UnwrittCVE-2011-40877.5The br_parse_ip_options function in net/bridge/br_netfilter.c in the Linux kernel before 2.6.39 does not properly initialize a certain data CVE-2011-40887.5ABRT might allow attackers to obtain sensitive information from crash reports.CVE-2011-40894.6The bzexe command in bzip2 1.0.5 and earlier generates compressed executables that do not properly handle temporary files during extraction,CVE-2011-40906.1Serendipity before 1.6 has an XSS issue in the karma plugin which may allow privilege escalation.CVE-2011-40915.0The libobby server in inc/server.hpp in libnet6 (aka net6) before 1.3.14 does not perform authentication before checking the user name, whicCVE-2011-40925.8obby (aka libobby) does not verify SSL server certificates, which allows remote attackers to spoof servers via an arbitrary certificate.CVE-2011-40935.8Integer overflow in inc/server.hpp in libnet6 (aka net6) before 1.3.14 might allow remote attackers to hijack connections and gain privilegeCVE-2011-40949.8Jara 1.6 has a SQL injection vulnerability.CVE-2011-40956.1Jara 1.6 has an XSS vulnerability
CVE-2011-4082: High severity, CVSS 7.5 | Vulnix