I need to have more details about CVE-2012-0883 vulnerability published on : http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-0883

Second, I need to know , what mean DSos mentioned on the Overview section. Is it necessary to have another vulnerability which allows an attacker to create an illicit dynamic library ?

And Finally, how can an attacker exploit this vulnerability ?

1 Answer 1


Access vector of this vulnerability is Local, that means this vulnerability itself can not be exploited remotely. In other words, to exploit this vulnerability a hacker has to gain access to the system by exploiting a different vulnerability.

Exploitation allows local users to gain privileges by injecting a BackDoor/Trojan horse as a DSO (Dynamic Shared Object) in the current working directory during execution of apachectl process.

Hope that helps.

  • Always in the same context is there a vulnerability whose reference is mentioned at the CVE, that allows an attacker to access remotely and gain local acess to the Apache web server, in order to exploit CVE-2012-0883.
    – Mely
    Commented Jun 11, 2012 at 11:43
  • The other vulnerability could be anything, a vulnerability either on Apache or on any other network service that can be exploited from internet or local network. It could be any means of getting access to the system, then exploit this one.
    – Majoris
    Commented Jun 11, 2012 at 11:49
  • my objective is to gain access to the Apache web server which allows me to exploit CVE-2012-0883. indeed,i have a server web in the DMZ zone of my system. my objective is that an attacker gain remotely access to the server web and then exploit CVE-2012-0883 but the problem is that when visiting cvedetails.com i can't find a vulnerability which allows me accessing the web server remotely. the first vulnerability that i will use must be mentioned in the NVD.
    – Mely
    Commented Jun 11, 2012 at 12:52
  • If you want to gain access to the web server then you must first find an vulnerability on the server that allows remote exploitation and code execution. Go through this list - cvedetails.com/vendor/45/Apache.html Out of many of the possible explications NVD cannot consider any one vulnerability to be prerequisite to this vulnerability. Rarely that happens.
    – Majoris
    Commented Jun 11, 2012 at 13:19
  • By visiting cvedetails.com/vendor/45/Apache.html , i have found the CVE-2011-3368 vulnerability . Do you think that it is a good example that allows remote exploitation of Apache server , is it possible then, to exploit CVE-2011-3368
    – Mely
    Commented Jun 11, 2012 at 14:13

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .