Fedora Core 10 FEDORA-2009-2686 (mod_security)
🗓️ 20 Mar 2009 00:00:00Reported by Copyright (C) 2009 E-Soft Inc.Type
openvas🔗 plugins.openvas.org👁 38 Views
| Reporter | Title | Published | Views | Family All 34 |
|---|---|---|---|---|
| ModSecurity < 2.5.9 Multipart Request Header Name DoS | 16 Aug 201300:00 | – | nessus | |
| Fedora 9 : mod_security-2.5.9-1.fc9 (2009-2654) | 16 Mar 200900:00 | – | nessus | |
| Fedora 10 : mod_security-2.5.9-1.fc10 (2009-2686) | 23 Apr 200900:00 | – | nessus | |
| GLSA-200907-02 : ModSecurity: Denial of Service | 3 Jul 200900:00 | – | nessus | |
| ModSecurity < 2.5.9 Multipart Request Header Name DoS | 2 Jul 201300:00 | – | nessus | |
| CVE-2009-1902 | 19 Mar 200900:00 | – | circl | |
| CVE-2009-1902 | 3 Jun 200916:33 | – | cve | |
| CVE-2009-1903 | 3 Jun 200916:33 | – | cve | |
| CVE-2009-1902 | 3 Jun 200916:33 | – | cvelist | |
| CVE-2009-1903 | 3 Jun 200916:33 | – | cvelist |
10
| Source | Link |
|---|---|
| secure1 | www.secure1.securityspace.com/smysecure/catid.html |
# SPDX-FileCopyrightText: 2009 E-Soft Inc.
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only
if(description)
{
script_oid("1.3.6.1.4.1.25623.1.0.63592");
script_cve_id("CVE-2009-1902", "CVE-2009-1903");
script_version("2025-01-13T08:32:03+0000");
script_tag(name:"last_modification", value:"2025-01-13 08:32:03 +0000 (Mon, 13 Jan 2025)");
script_tag(name:"creation_date", value:"2009-03-20 00:52:38 +0100 (Fri, 20 Mar 2009)");
script_tag(name:"cvss_base", value:"5.0");
script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:N/I:N/A:P");
script_name("Fedora Core 10 FEDORA-2009-2686 (mod_security)");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (C) 2009 E-Soft Inc.");
script_family("Fedora Local Security Checks");
script_tag(name:"insight", value:"Update Information:
Security fixes for potential denials of service when using PDF XSS protection as
well as when parsing multipart requests.
ChangeLog:
* Thu Mar 12 2009 Michael Fleming 2.5.9-1
- Update to upstream release 2.5.9
- Fixes potential DoS' in multipart request and PDF XSS handling");
script_tag(name:"solution", value:"Apply the appropriate updates.
This update can be installed with the yum update program. Use
su -c 'yum update mod_security' at the command line.");
script_xref(name:"URL", value:"https://secure1.securityspace.com/smysecure/catid.html?in=FEDORA-2009-2686");
script_tag(name:"summary", value:"The remote host is missing an update to mod_security
announced via advisory FEDORA-2009-2686.
Note: This VT has been deprecated and is therefore no longer functional.");
script_tag(name:"qod_type", value:"package");
script_tag(name:"solution_type", value:"VendorFix");
script_tag(name:"deprecated", value:TRUE);
exit(0);
}
exit(66);
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
13 Jan 2025 00:00Current
6.4Medium risk
Vulners AI Score6.4
CVSS 25
EPSS0.13735