Description
Off-by-one buffer overflow in ModSecurity (mod_security) 1.7.4 for Apache 2.x, when SecFilterScanPost is enabled, allows remote attackers to execute arbitrary code via crafted POST requests.
References
- 20040316 ModSecurity 1.7.4 for Apache 2.x remote off-by-one overflow mailing-list
- 9885 vdb-entry
- mod-security-offbyone-bo(15489) vdb-entry
- 11138 third-party-advisory
- http://www.s-quadra.com/advisories/Adv-20040315.txt
- VU#779438 third-party-advisory
- http://www.modsecurity.org/