CVE-2011-4082

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

A local file inclusion flaw was found in the way the phpLDAPadmin before 0.9.8 processed certain values of the "Accept-Language" HTTP header. A remote attacker could use this flaw to cause a denial of service via specially-crafted request.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-400

Affected software

Vendor	Product	Versions
phpldapadmin	phpldapadmin	before 0.9.8

References

https://access.redhat.com/security/cve/cve-2011-4082Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-4082Issue Tracking, Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2011-4082Broken Link
https://access.redhat.com/security/cve/cve-2011-4082Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-4082Issue Tracking, Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2011-4082Broken Link

Timeline

Published: Nov 26, 2019
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2011

CVE-2011-40834.3The sosreport utility in the Red Hat sos package before 1.7-9 and 2.x before 2.2-17 includes (1) Certificate-based Red Hat Network private e CVE-2011-40856.8The servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2, SOA Platform before 5.2.0, BRMS Platform befor CVE-2011-40864.9The journal_unmap_buffer function in fs/jbd2/transaction.c in the Linux kernel before 3.3.1 does not properly handle the _Delay and _Unwritt CVE-2011-40877.5The br_parse_ip_options function in net/bridge/br_netfilter.c in the Linux kernel before 2.6.39 does not properly initialize a certain data CVE-2011-40887.5ABRT might allow attackers to obtain sensitive information from crash reports.CVE-2011-40894.6The bzexe command in bzip2 1.0.5 and earlier generates compressed executables that do not properly handle temporary files during extraction,CVE-2011-40906.1Serendipity before 1.6 has an XSS issue in the karma plugin which may allow privilege escalation.CVE-2011-40915.0The libobby server in inc/server.hpp in libnet6 (aka net6) before 1.3.14 does not perform authentication before checking the user name, whic CVE-2011-40925.8obby (aka libobby) does not verify SSL server certificates, which allows remote attackers to spoof servers via an arbitrary certificate.CVE-2011-40935.8Integer overflow in inc/server.hpp in libnet6 (aka net6) before 1.3.14 might allow remote attackers to hijack connections and gain privilege CVE-2011-40949.8Jara 1.6 has a SQL injection vulnerability.CVE-2011-40956.1Jara 1.6 has an XSS vulnerability