Back to search
CVE-2009-1902
Published: Jun 3, 2009
Modified: Aug 7, 2024
PUBLISHED
Description
The multipart processor in ModSecurity before 2.5.9 allows remote attackers to cause a denial of service (crash) via a multipart form datapost request with a missing part header name, which triggers a NULL pointer dereference.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
FEDORA-2009-2654
vendor-advisory
x_refsource_FEDORA
modsecurity-multipart-dos(49212)
vdb-entry
x_refsource_XF
8241
exploit
x_refsource_EXPLOIT-DB
GLSA-200907-02
vendor-advisory
x_refsource_GENTOO
34256
third-party-advisory
x_refsource_SECUNIA
35687
third-party-advisory
x_refsource_SECUNIA
52553
vdb-entry
x_refsource_OSVDB
34311
third-party-advisory
x_refsource_SECUNIA
FEDORA-2009-2686
vendor-advisory
x_refsource_FEDORA
SUSE-SR:2009:011
vendor-advisory
x_refsource_SUSE
20090319 [ISecAuditors Security Advisories] ModSecurity < 2.5.9 remote Denial of Service
mailing-list
x_refsource_BUGTRAQ
ADV-2009-0703
vdb-entry
x_refsource_VUPEN
34096
vdb-entry
x_refsource_BID
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now