Debian DSA-2506-1 : libapache-mod-security

NASLDB: Debian DSA-2506-1 : libapache-mod-security - ModSecurity bypass

General

ID: 59825
Name: Debian DSA-2506-1 : libapache-mod-security – ModSecurity bypass

Summary: Checks dpkg output for the updated package

Credits: –

Classification

Risk: –

CVSS: –
CVSS Base Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N
CVSS Temporal Vector: –

Port: 0
Family: Debian Local Security Checks
Type: Local

Description

Qualys Vulnerability & Malware Research Labs discovered a
vulnerability in ModSecurity, a security module for the Apache
webserver. In situations where both ‘Content:Disposition: attachment’
and ‘Content-Type: multipart’ were present in HTTP headers, the
vulnerability could allow an attacker to bypass policy and execute
cross-site script (XSS) attacks through properly crafted HTML
documents.

Exploiting

Exploit Available: –
Exploitability Ease: –

Sources

CVE: CVE-2012-2751
OSVDB: –
Bugtraq: –
scipID: –

Timeline

Vulnerability Disclosure: –
Patch Release: 2012/07/02
Plugin Release: 2012/07/03

Plugin

Version: 1.2
Filename: debian_DSA-2506.nasl
Filesize: 3137 bytes
MD5 Hash: b8445378b721175294bd3b3e88f4f5c7

Identification: Host/local_checks_enabled
Require Keys: Host/local_checks_enabled", "Host/Debian/release", "Host/Debian/dpkg-l
Dependencies: "ssh_get_info.nasl"

Letzte Plugins

Letzte Plugins

scip AG