MGASA-2013-0313 Updated apache-mod_fcgid packages fix CVE-2013-4365

Updated apache-modfcgid package fixes security vulnerability: Apache modfcgid before version 2.3.9 fails to perform adequate boundary checks on user-supplied input. This may allow a remote attacker to cause a heap-based buffer overflow, resulting in a denial of service or potentially allowing the...

Updated apache-mod_fcgid packages fix CVE-2013-4365

Updated apache-modfcgid package fixes security vulnerability: Apache modfcgid before version 2.3.9 fails to perform adequate boundary checks on user-supplied input. This may allow a remote attacker to cause a heap-based buffer overflow, resulting in a denial of service or potentially allowing the...

Apache 'mod_fcgid' Module Heap Buffer Overflow Vulnerability

Binary data 8028.prm...

Fedora 20 : mod_fcgid-2.3.9-1.fc20 (2013-18579)

Current upstream maintenance release, including a security fix for a possible heap buffer overwrite issue CVE-2013-4365. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

[SECURITY] Fedora 20 Update: mod_fcgid-2.3.9-1.fc20

modfcgid is a binary-compatible alternative to the Apache module modfastc gi. modfcgid has a new process management strategy, which concentrates on redu cing the number of fastcgi servers, and kicking out corrupt fastcgi servers as s oon as possible...

Debian Security Advisory DSA 2778-1 (libapache2-mod-fcgid - heap-based buffer overflow)

Robert Matthews discovered that the Apache FCGID module, a FastCGI implementation for Apache HTTP Server, fails to perform adequate boundary checks on user-supplied input. This may allow a remote attacker to cause a heap-based buffer overflow, resulting in a denial of service or potentially...

FreeBSD : mod_fcgid -- possible heap buffer overwrite (9003b500-31e3-11e3-b0d0-20cf30e32f6d)

Apache Project reports : Fix possible heap buffer overwrite. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidrine and contributors Redistribution and use in...

Gentoo Security Advisory GLSA 201207-09 (mod_fcgid)

The remote host is missing updates announced in advisory GLSA 201207-09. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Gentoo Security Advisory GLSA 201207-09 (mod_fcgid)

The remote host is missing updates announced in advisory GLSA 201207-09. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

GLSA-201207-09 : mod_fcgid: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201207-09 modfcgid: Multiple vulnerabilities Multiple vulnerabilities have been found in modfcgid: An error in the 'fcgidheaderbucketread' function in fcgidbucket.c could cause a stack-based buffer overflow CVE-2010-3872. An error...

mod_fcgid: Multiple vulnerabilities

Background modfcgid is a binary-compatible alternative to modfastcgi with better process management. Description Multiple vulnerabilities have been found in modfcgid: An error in the "fcgidheaderbucketread" function in fcgidbucket.c could cause a stack-based buffer overflow CVE-2010-3872. An erro...

Apache 'mod_fcgid'模块 2.3.6 拒绝服务漏洞

Bugtraq ID: 52565 CVE ID：VE-2012-1181 modfcgid是一个跟modfastcgi兼容的Apache module modfcgid 2.3.6没有正确处理配置在VirtualHost中的FcgidMaxProcessesPerClass参数引入的一个回溯可导致FcgidMaxProcessePerClas不起作用，攻击者可以利用漏洞对模块进行拒绝服务攻击 0 Apache Software Foundation modfcgid 2.3.6 厂商解决方案 Apache ----- Apache Software Foundation modfcgi...

CVE-2012-1181

fcgidspawnctl.c in the modfcgid module 2.3.6 for the Apache HTTP Server does not recognize the FcgidMaxProcessesPerClass directive for a virtual host, which makes it easier for remote attackers to cause a denial of service memory consumption via a series of HTTP requests that triggers a process...

DEBIAN-CVE-2012-1181

fcgidspawnctl.c in the modfcgid module 2.3.6 for the Apache HTTP Server does not recognize the FcgidMaxProcessesPerClass directive for a virtual host, which makes it easier for remote attackers to cause a denial of service memory consumption via a series of HTTP requests that triggers a process...

Design/Logic Flaw

fcgidspawnctl.c in the modfcgid module 2.3.6 for the Apache HTTP Server does not recognize the FcgidMaxProcessesPerClass directive for a virtual host, which makes it easier for remote attackers to cause a denial of service memory consumption via a series of HTTP requests that triggers a process...

CVE-2012-1181

CVE-2012-1181 affects the Apache mod_fcgid module (version 2.3.6) where fcgid_spawn_ctl.c fails to recognize the FcgidMaxProcessesPerClass directive for a virtual host. This misbehavior can allow remote attackers to trigger a higher-than-intended process count, leading to memory consumption and p...

CVE-2012-1181

fcgidspawnctl.c in the modfcgid module 2.3.6 for the Apache HTTP Server does not recognize the FcgidMaxProcessesPerClass directive for a virtual host, which makes it easier for remote attackers to cause a denial of service memory consumption via a series of HTTP requests that triggers a process...

apache2-mod_fcgid: fixed possible stack overflow due to wrong pointer arithmetic (CVE-2010-3872) (important)

A possible stack overflow in apache2-modfcgid due to wrong pointer arithmetic has been fixed. CVE-2010-3872 has been assigned to this issue...

Apache mod_fcgid Module fcgid_header_bucket_read() Function Remote Stack Buffer Overflow

According to its self-reported banner, the Apache web server listening on this port includes a version of the modfcgid module earlier than 2.3.6. As such, it has a stack-based buffer overflow vulnerability because of an error in the pointer arithmetic used in the 'fcgidheaderbucketread' function...

[SECURITY] [DSA-2140-1] New libapache2-mod-fcgid packages fixes stack overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-2140-1 [email protected] http://www.debian.org/security/ Stefan Fritsch January 05, 2011 http://www.debian.org/security/faq -...