DSA-2778-1 libapache2-mod-fcgid -- heap-based buffer overflowID: oval:org.secpod.oval:def:601126 | Date: (C)2013-10-16 (M)2022-10-10 |
Class: PATCH | Family: unix |
Robert Matthews discovered that the Apache FCGID module, a FastCGI implementation for Apache HTTP Server, fails to perform adequate boundary checks on user-supplied input. This may allow a remote attacker to cause a heap-based buffer overflow, resulting in a denial of service or potentially allowing the execution of arbitrary code.
Platform: |
Debian 7.0 |
Debian 6.0 |
Product: |
libapache2-mod-fcgid |