Description
Heap-based buffer overflow in the sec_filter_out function in mod_security 1.7RC1 through 1.7.1 in Apache 2 allows remote attackers to execute arbitrary code via a server side script that sends a large amount of data.
References
- 8919 vdb-entry
- 20031028 mod_security 1.7RC1 to 1.7.1 vulnerability mailing-list
- mod-security-secfilterout-bo(13543) vdb-entry
- 10085 third-party-advisory
- http://adsystems.com.pl/adg-mod_security171.txt
- 1008025 vdb-entry
- http://www.modsecurity.org/download/CHANGES