Null pointer dereference

The multipart processor in ModSecurity before 2.5.9 allows remote attackers to cause a denial of service crash via a multipart form datapost request with a missing part header name, which triggers a NULL pointer dereference...

CVE-2009-1902

The multipart processor in ModSecurity before 2.5.9 allows remote attackers to cause a denial of service crash via a multipart form datapost request with a missing part header name, which triggers a NULL pointer dereference...

CVE-2009-1903

The PDF XSS protection feature in ModSecurity before 2.5.8 allows remote attackers to cause a denial of service Apache httpd crash via a request for a PDF file that does not use the GET method...

CVE-2009-1902

The multipart processor in ModSecurity before 2.5.9 allows remote attackers to cause a denial of service crash via a multipart form datapost request with a missing part header name, which triggers a NULL pointer dereference...

CVE-2009-1903

The PDF XSS protection feature in ModSecurity before 2.5.8 allows remote attackers to cause a denial of service Apache httpd crash via a request for a PDF file that does not use the GET method...

CVE-2009-1903

ModSecurity (Apache module) prior to version 2.5.9 is affected by two CVEs; CVE-2009-1902 (NULL pointer dereference when processing multipart requests without a part header name) and CVE-2009-1903 (PDF XSS protection failing for PDF requests not using GET), leading to possible denial of service (...

CVE-2009-1902

CVE-2009-1902 affects ModSecurity prior to 2.5.9. The vulnerability arises in the multipart processor when a datapost request has a missing part header name, causing a NULL pointer dereference and potential denial of service (remote crash). Evidence from SUSE confirms the same description and imp...

FreeBSD : ModSecurity for Apache 2.x remote off-by-one overflow (c2e10368-77ab-11d8-b9e8-00e04ccb0a62)

When the directive 'SecFilterScanPost' is enabled, the Apache 2.x version of ModSecurity is vulnerable to an off-by-one overflow %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright...

[ISecAuditors Security Advisories] ModSecurity < 2.5.9 remote Denial of Service (DoS)

============================================= INTERNET SECURITY AUDITORS ALERT 2009-001 - Original release date: February 25th, 2009 - Last revised: March 19th, 2009 - Discovered by: Juan Galiana Lara - Severity: 7.8/10 CVSS Base Scored ============================================= I. VULNERABILI...

ModSecurity Denial Of Service

============================================= INTERNET SECURITY AUDITORS ALERT 2009-001 - Original release date: February 25th, 2009 - Last revised: March 19th, 2009 - Discovered by: Juan Galiana Lara - Severity: 7.8/10 CVSS Base Scored ============================================= I. VULNERABILI...

ModSecurity < 2.5.9 Remote Denial of Service Vulnerability

No description provided by source. ============================================= INTERNET SECURITY AUDITORS ALERT 2009-001 - Original release date: February 25th, 2009 - Last revised: March 19th, 2009 - Discovered by: Juan Galiana Lara - Severity: 7.8/10 CVSS Base Scored...

Breach Security ModSecurity for Apache DoS

Module hangs on incomplete HTTP POST multipart/form-data request...

ModSecurity < 2.5.9 Remote Denial of Service Vulnerability

Exploit for multiple platform in category dos / poc ========================================================== ModSecurity 2.5.9 Remote Denial of Service Vulnerability ========================================================== ============================================= INTERNET SECURITY AUDITO...

ModSecurity 2.5.9 - Remote Denial of Service

ModSecurity 2.5.9 - Remote Denial of Service ============================================= INTERNET SECURITY AUDITORS ALERT 2009-001 - Original release date: February 25th, 2009 - Last revised: March 19th, 2009 - Discovered by: Juan Galiana Lara - Severity: 7.8/10 CVSS Base Scored...

ModSecurity < 2.5.9 - Remote Denial of Service

============================================= INTERNET SECURITY AUDITORS ALERT 2009-001 - Original release date: February 25th, 2009 - Last revised: March 19th, 2009 - Discovered by: Juan Galiana Lara - Severity: 7.8/10 CVSS Base Scored ============================================= I. VULNERABILI...

ModSecurity多个拒绝服务漏洞

BUGTRAQ ID: 34096 modsecurity是经常与PHP结合使用的Web应用防火墙。 如果启用了PDF跨站脚本防护的话，提交给PDF文件的非GET请求会导致httpd进程崩溃；此外如果modsecurity解析了缺少部分首部名称的多部内容的话，可能导致Apache崩溃。 Breach Security modsecurity 2.5.8 Breach Security modsecurity 2.5.6 Breach Security modsecurity 2.5.5 厂商补丁： Breach Security ---------------...

[SECURITY] Fedora 10 Update: mod_security-2.5.9-1.fc10

ModSecurity is an open source intrusion detection and prevention engine for web applications. It operates embedded into the web server, acting as a powerful umbrella - shielding web applications from attacks...

ModSecurity Detection

Binary data 4956.prm...

ModSecurity 'SecCacheTransformations' Security Bypass Vulnerability

This host is running ModSecurity and is prone to Security Bypass vulnerability. OpenVAS Vulnerability Test $Id: secpodmodsecuritysecbypassvuln.nasl 4522 2016-11-15 14:52:19Z teissa $ ModSecurity 'SecCacheTransformations' Security Bypass Vulnerability Authors: Sujit Ghosal Copyright: Copyright c...

ModSecurity 'SecCacheTransformations' Security Bypass Vulnerability

ModSecurity is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...