PT-2004-2669 · Modsecurity · Modsecurity

Evgeny Legerov · Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-1765

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ModSecurity (mod security) version 1.7.4

Description The issue is an off-by-one buffer overflow that can be triggered when the SecFilterScanPost option is enabled. This allows remote attackers to execute arbitrary code by sending crafted POST requests.

Recommendations For ModSecurity (mod security) version 1.7.4, consider disabling the SecFilterScanPost option as a temporary workaround until a patch is available.

Fix

Related Identifiers

CVE-2004-1765

Affected Products

Modsecurity

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2004-1765 · Security Note
• http://securityfocus.com/bid/9885 · Patch
• http://secunia.com/advisories/11138 · Patch
• http://marc.info/?l=bugtraq&m=107945597331370&w=2 · Note
• http://s-quadra.com/advisories/Adv-20040315.txt · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15489 · Note
• http://modsecurity.org · Note
• http://kb.cert.org/vuls/id/779438 · Note