CVE-2011-3624

Various methods in WEBrick::HTTPRequest in Ruby 1.9.2 and 1.8.7 and earlier do not validate the X-Forwarded-For, X-Forwarded-Host and X-Forwarded-Server headers in requests, which might allow remote attackers to inject arbitrary text into log files or bypass intended address parsing via a crafted header.

• CWE-74

• https://access.redhat.com/security/cve/cve-2011-3624Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-3624Issue Tracking, Third Party Advisory
• https://redmine.ruby-lang.org/issues/5418
• https://security-tracker.debian.org/tracker/CVE-2011-3624Third Party Advisory
• https://access.redhat.com/security/cve/cve-2011-3624Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-3624Issue Tracking, Third Party Advisory
• https://redmine.ruby-lang.org/issues/5418
• https://security-tracker.debian.org/tracker/CVE-2011-3624Third Party Advisory

Published

Nov 26, 2019

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-3618atop: symlink attack possible due to insecure tempfile handl…7.8
• CVE-2011-3619The apparmor_setprocattr function in security/apparmor/lsm.c…
• CVE-2011-3620Apache Qpid 0.12 does not properly verify credentials during…
• CVE-2011-3621A reverse proxy issue exists in FluxBB before 1.4.7 when FOR…9.8
• CVE-2011-3622A Cross-Site Scripting (XSS) vulnerability exists in the adm…6.1
• CVE-2011-3623Multiple stack-based buffer overflows in VideoLAN VLC media …
• CVE-2011-3625Stack-based buffer overflow in the sub_read_line_sami functi…
• CVE-2011-3626Double free vulnerability in the prepare_exec function in sr…
• CVE-2011-3627The bytecode engine in ClamAV before 0.97.3 allows remote at…
• CVE-2011-3628Untrusted search path vulnerability in pam_motd (aka the MOT…
• CVE-2011-3629Joomla! core 1.7.1 allows information disclosure due to weak…7.5
• CVE-2011-3630Hardlink before 0.1.2 suffer from multiple stack-based buffe…8.8