(OpenBSD Issues Fix) Apache mod_rewrite Off-by-one Error Lets Remote Users Execute Arbitrary Code
|
|
SecurityTracker Alert ID: 1016608 |
|
SecurityTracker URL: http://securitytracker.com/id/1016608
|
|
CVE Reference:
CVE-2006-3747
(Links to External Site)
|
Date: Jul 30 2006
|
Impact:
Denial of service via network, Execution of arbitrary code via network, User access via network
|
Fix Available: Yes Vendor Confirmed: Yes
|
Version(s): prior to 1.3.37, 2.0.59
|
Description:
A vulnerability was reported in Apache in the Rewrite module. A remote user may be able to execute arbitrary code on the target system.
A remote user can trigger an off-by-one error in the processing of certain types of Rewrite rules to cause web server processes to crash or potentially execute arbitrary code.
The impact depends on the manner in which Apache httpd was compiled.
|
Impact:
A remote user can execute arbitrary code on the target system.
|
Solution:
OpenBSD has issued a fix.
ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.9/common/004_httpd.patch
ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.8/common/009_httpd.patch
|
Vendor URL: httpd.apache.org/ (Links to External Site)
|
Cause:
Boundary error
|
Underlying OS:
UNIX (OpenBSD)
|
|
Message History:
This archive entry is a follow-up to the message listed below.
|
Source Message Contents
|
Date: Sun, 30 Jul 2006 14:29:05 -0400
Subject: OpenBSD security fix
|
SECURITY FIX: July 30, 2006 All architectures
httpd(8) 's mod_rewrite has a potentially exploitable off-by-one buffer overflow. The
buffer overflow may result in a vulnerability which, in combination with certain types
of Rewrite rules in the web server configuration files, could be triggered remotely.
The default install is not affected by the buffer overflow. CVE-2006-3747
A source code patch exists which remedies this problem.
ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.9/common/004_httpd.patch
ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.8/common/009_httpd.patch
|
|
