Nixpkgs Security Tracker

Permalink CVE-2010-3872

7.5 HIGH

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): LOW
Privileges required (PR): NONE
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): NONE
Integrity impact (I): NONE
Availability impact (A): HIGH

created 1 month ago

Httpd: mod_fcgid: stack-based buffer overflow in fcgid_header_bucket_read() in modules/fcgid/fcgid_bucket.c

A flaw was found in the mod_fcgid module of httpd. A malformed FastCGI response may result in a stack-based buffer overflow in the modules/fcgid/fcgid_bucket.c file in the fcgid_header_bucket_read() function, resulting in an application crash.

References

FEDORA-2010-17474 vendor-advisory x_refsource_FEDORA
FEDORA-2010-17434 vendor-advisory x_refsource_FEDORA
FEDORA-2010-17472 vendor-advisory x_refsource_FEDORA
openSUSE-SU-2011:0884 vendor-advisory x_refsource_SUSE
SUSE-SU-2011:0885 vendor-advisory x_refsource_SUSE
69275 x_refsource_OSVDB vdb-entry
42288 x_refsource_SECUNIA third-party-advisory
42302 x_refsource_SECUNIA third-party-advisory
42815 x_refsource_SECUNIA third-party-advisory
DSA-2140 vendor-advisory x_refsource_DEBIAN
[apache] 20101107 [ANNOUNCE] mod_fcgid 2.3.6 is released x_refsource_MLIST mailing-list
44900 vdb-entry x_refsource_BID
ADV-2010-2997 x_refsource_VUPEN vdb-entry
ADV-2010-2998 x_refsource_VUPEN vdb-entry
ADV-2011-0031 x_refsource_VUPEN vdb-entry
https://access.redhat.com/security/cve/CVE-2010-3872 x_refsource_REDHAT vdb-entry
RHBZ#2248172 issue-tracking x_refsource_REDHAT
apache-fcgid-bo(63303) vdb-entry x_refsource_XF
https://github.com/apache/httpd-mod_fcgid/commit/b1afa70840b4ab4e6fbc12ac8798b2…
https://issues.apache.org/bugzilla/show_bug.cgi?id=49406 x_refsource_CONFIRM
FEDORA-2010-17474 vendor-advisory x_refsource_FEDORA
FEDORA-2010-17434 vendor-advisory x_refsource_FEDORA
FEDORA-2010-17472 vendor-advisory x_refsource_FEDORA
openSUSE-SU-2011:0884 vendor-advisory x_refsource_SUSE
SUSE-SU-2011:0885 vendor-advisory x_refsource_SUSE
69275 x_refsource_OSVDB vdb-entry
42288 x_refsource_SECUNIA third-party-advisory
42302 x_refsource_SECUNIA third-party-advisory
42815 x_refsource_SECUNIA third-party-advisory
DSA-2140 vendor-advisory x_refsource_DEBIAN
[apache] 20101107 [ANNOUNCE] mod_fcgid 2.3.6 is released x_refsource_MLIST mailing-list
44900 vdb-entry x_refsource_BID
ADV-2010-2997 x_refsource_VUPEN vdb-entry
ADV-2010-2998 x_refsource_VUPEN vdb-entry
ADV-2011-0031 x_refsource_VUPEN vdb-entry
https://access.redhat.com/security/cve/CVE-2010-3872 x_refsource_REDHAT vdb-entry
RHBZ#2248172 issue-tracking x_refsource_REDHAT
apache-fcgid-bo(63303) vdb-entry x_refsource_XF
https://github.com/apache/httpd-mod_fcgid/commit/b1afa70840b4ab4e6fbc12ac8798b2…
https://issues.apache.org/bugzilla/show_bug.cgi?id=49406 x_refsource_CONFIRM
https://issues.apache.org/bugzilla/show_bug.cgi?id=49406 x_transferred x_refsource_CONFIRM
FEDORA-2010-17474 vendor-advisory x_transferred x_refsource_FEDORA
FEDORA-2010-17434 vendor-advisory x_transferred x_refsource_FEDORA
FEDORA-2010-17472 vendor-advisory x_transferred x_refsource_FEDORA
openSUSE-SU-2011:0884 vendor-advisory x_transferred x_refsource_SUSE
SUSE-SU-2011:0885 vendor-advisory x_transferred x_refsource_SUSE
69275 x_refsource_OSVDB x_transferred vdb-entry
42288 x_refsource_SECUNIA third-party-advisory x_transferred
42302 x_refsource_SECUNIA third-party-advisory x_transferred
42815 x_refsource_SECUNIA third-party-advisory x_transferred
DSA-2140 vendor-advisory x_refsource_DEBIAN x_transferred
[apache] 20101107 [ANNOUNCE] mod_fcgid 2.3.6 is released x_refsource_MLIST mailing-list x_transferred
44900 x_transferred vdb-entry x_refsource_BID
ADV-2010-2997 x_refsource_VUPEN vdb-entry x_transferred
ADV-2010-2998 x_refsource_VUPEN vdb-entry x_transferred
ADV-2011-0031 x_refsource_VUPEN vdb-entry x_transferred
https://access.redhat.com/security/cve/CVE-2010-3872 x_transferred x_refsource_REDHAT vdb-entry
RHBZ#2248172 issue-tracking x_refsource_REDHAT x_transferred
apache-fcgid-bo(63303) x_transferred vdb-entry x_refsource_XF
https://github.com/apache/httpd-mod_fcgid/commit/b1afa70840b4ab4e6fbc12ac8798b2… x_transferred
FEDORA-2010-17474 vendor-advisory x_refsource_FEDORA
FEDORA-2010-17434 vendor-advisory x_refsource_FEDORA
FEDORA-2010-17472 vendor-advisory x_refsource_FEDORA
openSUSE-SU-2011:0884 vendor-advisory x_refsource_SUSE
SUSE-SU-2011:0885 vendor-advisory x_refsource_SUSE
69275 x_refsource_OSVDB vdb-entry
42288 x_refsource_SECUNIA third-party-advisory
42302 x_refsource_SECUNIA third-party-advisory
42815 x_refsource_SECUNIA third-party-advisory
DSA-2140 vendor-advisory x_refsource_DEBIAN
[apache] 20101107 [ANNOUNCE] mod_fcgid 2.3.6 is released x_refsource_MLIST mailing-list
44900 vdb-entry x_refsource_BID
ADV-2010-2997 x_refsource_VUPEN vdb-entry
ADV-2010-2998 x_refsource_VUPEN vdb-entry
ADV-2011-0031 x_refsource_VUPEN vdb-entry
https://access.redhat.com/security/cve/CVE-2010-3872 x_refsource_REDHAT vdb-entry
RHBZ#2248172 issue-tracking x_refsource_REDHAT
apache-fcgid-bo(63303) vdb-entry x_refsource_XF
https://github.com/apache/httpd-mod_fcgid/commit/b1afa70840b4ab4e6fbc12ac8798b2…
https://issues.apache.org/bugzilla/show_bug.cgi?id=49406 x_refsource_CONFIRM
FEDORA-2010-17474 vendor-advisory x_transferred x_refsource_FEDORA
FEDORA-2010-17434 vendor-advisory x_transferred x_refsource_FEDORA
FEDORA-2010-17472 vendor-advisory x_transferred x_refsource_FEDORA
openSUSE-SU-2011:0884 vendor-advisory x_transferred x_refsource_SUSE
SUSE-SU-2011:0885 vendor-advisory x_transferred x_refsource_SUSE
69275 x_refsource_OSVDB x_transferred vdb-entry
42288 x_refsource_SECUNIA third-party-advisory x_transferred
42302 x_refsource_SECUNIA third-party-advisory x_transferred
42815 x_refsource_SECUNIA third-party-advisory x_transferred
DSA-2140 vendor-advisory x_refsource_DEBIAN x_transferred
[apache] 20101107 [ANNOUNCE] mod_fcgid 2.3.6 is released x_refsource_MLIST mailing-list x_transferred
44900 x_transferred vdb-entry x_refsource_BID
ADV-2010-2997 x_refsource_VUPEN vdb-entry x_transferred
ADV-2010-2998 x_refsource_VUPEN vdb-entry x_transferred
ADV-2011-0031 x_refsource_VUPEN vdb-entry x_transferred
https://access.redhat.com/security/cve/CVE-2010-3872 x_transferred x_refsource_REDHAT vdb-entry
RHBZ#2248172 issue-tracking x_refsource_REDHAT x_transferred
apache-fcgid-bo(63303) x_transferred vdb-entry x_refsource_XF
https://github.com/apache/httpd-mod_fcgid/commit/b1afa70840b4ab4e6fbc12ac8798b2… x_transferred
https://issues.apache.org/bugzilla/show_bug.cgi?id=49406 x_transferred x_refsource_CONFIRM