{"vuid":"VU#779438","idnumber":"779438","name":"ModSecurity for Apache vulnerable to off-by-one overflow when directive \"SecFilterScanPost\" is enabled","keywords":["ModSecurity","off-by-one overflow","SecFilterScanPost"],"overview":"A vulnerability in the mod_security module for Apache may permit a remote attacker to execute arbitrary code on the vulnerable web server.","clean_desc":"ModSecurity is an open source intrusion detection and prevention engine for web applications. The mod_security module for Apache 2.0.X contains an off-by-one buffer overflow vulnerabililty in the code that scans incoming POST requests. The module will scan incoming POST requests when the directive \"SecFilterScanPost\" is enabled. Systems with this directive disabled are not vulnerable.","impact":"A remote attacker may be able to execute arbitrary code on the web server with the privileges of the Apache process.","resolution":"This issue is resolved in mod_security version 1.7.5.","workarounds":"","sysaffected":"","thanks":"Thanks to S-Quadra Security Research for reporting this vulnerability.","author":"This document was written by Jason A Rafail.","public":["http://www.modsecurity.org","http://www.s-quadra.com/advisories/Adv-20040315.txt"],"cveids":[""],"certadvisory":"","uscerttechnicalalert":null,"datecreated":"2004-03-16T20:27:13Z","publicdate":"2004-02-16T00:00:00Z","datefirstpublished":"2004-03-23T18:55:20Z","dateupdated":"2004-04-01T21:08:44Z","revision":6,"vrda_d1_directreport":"","vrda_d1_population":"","vrda_d1_impact":"","cam_widelyknown":"15","cam_exploitation":"0","cam_internetinfrastructure":"10","cam_population":"10","cam_impact":"17","cam_easeofexploitation":"10","cam_attackeraccessrequired":"15","cam_scorecurrent":"11.953125","cam_scorecurrentwidelyknown":"14.34375","cam_scorecurrentwidelyknownexploited":"23.90625","ipprotocol":"","cvss_accessvector":"","cvss_accesscomplexity":"","cvss_authentication":null,"cvss_confidentialityimpact":"","cvss_integrityimpact":"","cvss_availabilityimpact":"","cvss_exploitablity":null,"cvss_remediationlevel":"","cvss_reportconfidence":"","cvss_collateraldamagepotential":"","cvss_targetdistribution":"","cvss_securityrequirementscr":"","cvss_securityrequirementsir":"","cvss_securityrequirementsar":"","cvss_basescore":"","cvss_basevector":"","cvss_temporalscore":"","cvss_environmentalscore":"","cvss_environmentalvector":"","metric":11.953125,"vulnote":null}