PT-2008-6728 · Trustwave · Modsecurity

Publicado 2008-12-18 · Atualizado 2017-08-08 · CVE-2008-5676

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions ModSecurity module versions 2.5.0 through 2.5.5

Description The issue is related to "transformation caching" when SecCacheTransformations is enabled, allowing remote attackers to cause a denial of service (daemon crash) or bypass the product's functionality via unknown vectors.

Recommendations For ModSecurity module versions 2.5.0 through 2.5.5, consider disabling the SecCacheTransformations feature as a temporary workaround to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2008-5676

Produtos afetados

Modsecurity

Referências · 6

• http://blog.modsecurity.org/2008/08/transformation.html · Aviso do Fabricante
• http://vupen.com/english/advisories/2008/2795 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-5676 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45770 · Nota
• http://freshmeat.net/projects/modsecurity/?branch_id=34901&release_id=282329 · Nota
• http://secunia.com/advisories/32146 · Aviso do Fabricante