Published: 22/11/2010 Updated: 07/11/2023

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

VMScore: 641

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

A flaw was found in the mod_fcgid module of httpd. A malformed FastCGI response may result in a stack-based buffer overflow in the modules/fcgid/fcgid_bucket.c file in the fcgid_header_bucket_read() function, resulting in an application crash.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apache mod fcgid 2.3.1
apache mod fcgid 2.3.2
apache mod fcgid 2.3.4
apache mod fcgid
apache mod fcgid 2.3.3

Debian Bug report logs - #605484 libapache2-mod-fcgid: stack overwrite vulnerability Package: libapache2-mod-fcgid; Maintainer for libapache2-mod-fcgid is Xavier Guimard <yadd@debianorg>; Source for libapache2-mod-fcgid is src:libapache2-mod-fcgid (PTS, buildd, popcon) Reported by: John Goerzen <jgoerzen@completeorg> ...

A vulnerability has been found in Apache mod_fcgid The Common Vulnerabilities and Exposures project identifies the following problem: CVE-2010-3872 A stack overflow could allow an untrusted FCGI application to cause a server crash or possibly to execute arbitrary code as the user running the web server For the stable distribution (lenny), ...

CWE-189 http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050930.html http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050976.html http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050932.html http://www.vupen.com/english/advisories/2010/2998 http://secunia.com/advisories/42288 http://secunia.com/advisories/42302 http://www.vupen.com/english/advisories/2010/2997 http://osvdb.org/69275 http://www.gossamer-threads.com/lists/apache/announce/391406 https://issues.apache.org/bugzilla/show_bug.cgi?id=49406 http://secunia.com/advisories/42815 http://www.vupen.com/english/advisories/2011/0031 http://www.securityfocus.com/bid/44900 http://www.debian.org/security/2010/dsa-2140 http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00004.html http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00005.html https://exchange.xforce.ibmcloud.com/vulnerabilities/63303 https://bugzilla.redhat.com/show_bug.cgi?id=2248172 https://access.redhat.com/security/cve/CVE-2010-3872 https://github.com/apache/httpd-mod_fcgid/commit/b1afa70840b4ab4e6fbc12ac8798b2f3ccc336b2 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=605484 https://nvd.nist.gov https://www.debian.org/security/./dsa-2140

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2010-3872

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect