PT-2008-6728 · Trustwave · Modsecurity

Published 2008-12-18 · Updated 2017-08-08 · CVE-2008-5676

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions ModSecurity module versions 2.5.0 through 2.5.5

Description The issue is related to "transformation caching" when SecCacheTransformations is enabled, allowing remote attackers to cause a denial of service (daemon crash) or bypass the product's functionality via unknown vectors.

Recommendations For ModSecurity module versions 2.5.0 through 2.5.5, consider disabling the SecCacheTransformations feature as a temporary workaround to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2008-5676

Affected Products

Modsecurity

References · 6

• http://blog.modsecurity.org/2008/08/transformation.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-5676 · Security Note
• http://secunia.com/advisories/32146 · Vendor Advisory
• http://vupen.com/english/advisories/2008/2795 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45770 · Note
• http://freshmeat.net/projects/modsecurity/?branch_id=34901&release_id=282329 · Note