Overview
A vulnerability in the mod_security module for Apache may permit a remote attacker to execute arbitrary code on the vulnerable web server.
Description
ModSecurity is an open source intrusion detection and prevention engine for web applications. The mod_security module for Apache 2.0.X contains an off-by-one buffer overflow vulnerabililty in the code that scans incoming POST requests. The module will scan incoming POST requests when the directive "SecFilterScanPost" is enabled. Systems with this directive disabled are not vulnerable. |
Impact
A remote attacker may be able to execute arbitrary code on the web server with the privileges of the Apache process. |
Solution
This issue is resolved in mod_security version 1.7.5. |
Vendor Information
CVSS Metrics
| Group | Score | Vector |
|---|---|---|
| Base | ||
| Temporal | ||
| Environmental |
References
Acknowledgements
Thanks to S-Quadra Security Research for reporting this vulnerability.
This document was written by Jason A Rafail.
Other Information
| CVE IDs: | None |
| Severity Metric: | 11.95 |
| Date Public: | 2004-02-16 |
| Date First Published: | 2004-03-23 |
| Date Last Updated: | 2004-04-01 21:08 UTC |
| Document Revision: | 6 |