Lucene search

K
cve[email protected]CVE-2008-5676
HistoryDec 19, 2008 - 1:52 a.m.

CVE-2008-5676

2008-12-1901:52:00
NVD-CWE-noinfo
web.nvd.nist.gov
28
cve-2008-5676
modsecurity
mod_security
apache http server
seccachetransformations
denial of service
daemon crash
transformation caching
vulnerability

7.1 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.013 Low

EPSS

Percentile

85.7%

Multiple unspecified vulnerabilities in the ModSecurity (aka mod_security) module 2.5.0 through 2.5.5 for the Apache HTTP Server, when SecCacheTransformations is enabled, allow remote attackers to cause a denial of service (daemon crash) or bypass the product’s functionality via unknown vectors related to “transformation caching.”

7.1 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.013 Low

EPSS

Percentile

85.7%

Related for CVE-2008-5676