CVE-2011-4415

CVE-2011-4415 describes a denial-of-service vulnerability in Apache HTTP Server versions 2.0.x through 2.0.64 and 2.2.x through 2.2.21 when the mod_setenvif module is enabled. A local attacker can exploit this by crafting a .htaccess file with a malicious SetEnvIf directive and an HTTP request header, leading to excessive memory consumption or a NULL pointer dereference. The vulnerability has a low CVSS score of 1.2, indicating a local attack vector with high attack complexity and only a partial impact on availability. While there is an ExploitDB entry (EDB-41769) detailing an integer overflow, there is no evidence of active exploitation, Metasploit or Nuclei modules, or significant community discussion or media coverage.