lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite for Android: free password hash cracker in your pocket
[<prev] [next>] [day] [month] [year] [list]
Message-ID: <4056DC6E.1000505@s-quadra.com>
From: research at s-quadra.com (S-Quadra Security Research)
Subject: ModSecurity 1.7.4 for Apache 2.x remote off-by-one overflow

		S-Quadra Advisory #2004-03-15

Topic: ModSecurity 1.7.4 for Apache 2.x remote off-by-one overflow
Severity: Average
Vendor URL: http://www.modsecurity.org
Advisory URL: http://www.s-quadra.com/advisories/Adv-20040315.txt
Release date: 15 Mar 2004

1. DESCRIPTION

ModSecurity is an open source intrusion detection and prevention engine
for web applications. It supports both branches of the Apache web
server. Please visit http://www.modsecurity.org for more information
about ModSecurity.

2. DETAILS

When directive "SecFilterScanPost" is enabled, ModSecurity checks
incoming POST payloads. In this mode Apache 2.x version of ModSecurity
is vulnerable to off-by-one overflow which could be potentially used by
a remote attacker to execute arbitrary code on a target's web server.

3. FIX INFORMATION

S-Quadra alerted Ivan Ristic (ModSecurity developer) on this issue 09
Feb 2004. Mod_security 1.7.5 which fixes this issue is available.

4. CREDITS

Evgeny Legerov <e.legerov@...uadra.com> is responsible for discovering
this issue.

5. ABOUT

S-Quadra dedicates its substantial knowledge and resources to managing
clients' IT security risks. S-Quadra audits and protection for software
and networks implement pioneering methods and ground-breaking
technologies.

		S-Quadra Advisory #2004-03-15


Powered by blists - more mailing lists