CVE-2012-1181

CVE-2012-1181 describes a denial-of-service vulnerability in the mod_fcgid module (version 2.3.6) for Apache HTTP Server. Specifically, the fcgid_spawn_ctl.c component fails to properly enforce the FcgidMaxProcessesPerClass directive for virtual hosts. This allows remote attackers to trigger excessive memory consumption and a denial of service by exceeding the intended process limit through a series of HTTP requests. The vulnerability has a CVSS score of 5.0, indicating a medium severity. It is easily exploitable over the network with low attack complexity and no authentication required, leading to a partial denial of service. There is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage for this CVE are minimal, suggesting low public awareness.