A security Bypass vulnerability exists in the FcgidPassHeader Proxy in mod_fcgid through 2016-07-07.

...

Debian: Security Advisory (DSA-2140-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE CVE-2013-4365

Heap-based buffer overflow in the fcgidheaderbucketread function in fcgidbucket.c in the modfcgid module before 2.3.9 for the Apache HTTP Server allows remote attackers to have an unspecified impact via unknown vectors...

CVE-2016-1000104

A security Bypass vulnerability exists in the FcgidPassHeader Proxy in modfcgid through 2016-07-07...

PT-2019-7506

Name of the Vulnerable Software and Affected Versions mod fcgid versions prior to 2016-07-07 Description A security bypass issue exists in the FcgidPassHeader Proxy in mod fcgid. Recommendations For mod fcgid versions prior to 2016-07-07, update to a version released after 2016-07-07 to resolve t...

PT-2013-4975

Name of the Vulnerable Software and Affected Versions mod fcgid module versions prior to 2.3.9 for the Apache HTTP Server Description A heap-based buffer overflow issue exists in the fcgid header bucket read function in fcgid bucket.c, allowing remote attackers to have an unspecified impact via...

Debian DSA-2778-1 : libapache2-mod-fcgid - heap-based buffer overflow

Robert Matthews discovered that the Apache FCGID module, a FastCGI implementation for Apache HTTP Server, fails to perform adequate boundary checks on user-supplied input. This may allow a remote attacker to cause a heap-based buffer overflow, resulting in a denial of service or potentially...

Debian Security Advisory DSA 2778-1 (libapache2-mod-fcgid - heap-based buffer overflow)

Robert Matthews discovered that the Apache FCGID module, a FastCGI implementation for Apache HTTP Server, fails to perform adequate boundary checks on user-supplied input. This may allow a remote attacker to cause a heap-based buffer overflow, resulting in a denial of service or potentially...

[SECURITY] [DSA 2778-1] libapache2-mod-fcgid security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2778-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso October 12, 2013 http://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-2778-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-2436-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2436-1 : libapache2-mod-fcgid - inactive resource limits

It was discovered that the Apache FCGID module, a FastCGI implementation, did not properly enforce the FcgidMaxProcessesPerClass resource limit, rendering this control ineffective and potentially allowing a virtual host to consume excessive resources. %NASLMINLEVEL 70300 C Tenable Network Securit...

CVE-2012-1181

fcgidspawnctl.c in the modfcgid module 2.3.6 for the Apache HTTP Server does not recognize the FcgidMaxProcessesPerClass directive for a virtual host, which makes it easier for remote attackers to cause a denial of service memory consumption via a series of HTTP requests that triggers a process...

PT-2012-3111

Name of the Vulnerable Software and Affected Versions mod fcgid module version 2.3.6 for the Apache HTTP Server Description The issue allows remote attackers to cause a denial of service, specifically memory consumption, by sending a series of HTTP requests. This is due to the mod fcgid module no...

Debian DSA-2140-1 : libapache2-mod-fcgid - stack overflow

A vulnerability has been found in Apache modfcgid. The Common Vulnerabilities and Exposures project identifies the following problem : - CVE-2010-3872 A stack overflow could allow an untrusted FCGI application to cause a server crash or possibly to execute arbitrary code as the user running the w...

PT-2010-5132

Name of the Vulnerable Software and Affected Versions httpd affected versions not specified Description A flaw was found in the mod fcgid module of httpd, where a malformed FastCGI response may cause a stack-based buffer overflow in the fcgid header bucket read function, potentially resulting in ...