Published: 17/10/2013 Updated: 07/11/2023

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Heap-based buffer overflow in the fcgid_header_bucket_read function in fcgid_bucket.c in the mod_fcgid module prior to 2.3.9 for the Apache HTTP Server allows remote malicious users to have an unspecified impact via unknown vectors.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apache mod_fcgid
debian debian linux 7.0
debian debian linux 6.0
opensuse opensuse 12.3
suse linux enterprise software development kit 11
opensuse opensuse 11.4
opensuse opensuse 12.2
suse cloud 2.0
suse cloud 1.0

Debian Bug report logs - #725942 libapache2-mod-fcgid: CVE-2013-4365 Package: libapache2-mod-fcgid; Maintainer for libapache2-mod-fcgid is Xavier Guimard <yadd@debianorg>; Source for libapache2-mod-fcgid is src:libapache2-mod-fcgid (PTS, buildd, popcon) Reported by: Moritz Muehlenhoff <jmm@inutilorg> Date: Thu, 10 ...

Robert Matthews discovered that the Apache FCGID module, a FastCGI implementation for Apache HTTP Server, fails to perform adequate boundary checks on user-supplied input This may allow a remote attacker to cause a heap-based buffer overflow, resulting in a denial of service or potentially allowing the execution of arbitrary code For the oldstabl ...

Heap-based buffer overflow in the fcgid_header_bucket_read function in fcgid_bucketc in the mod_fcgid module before 239 for the Apache HTTP Server allows remote attackers to have an unspecified impact via unknown vectors ...

CWE-787 http://secunia.com/advisories/55197 http://svn.apache.org/viewvc?view=revision&revision=1527362 http://www.debian.org/security/2013/dsa-2778 http://lists.opensuse.org/opensuse-updates/2013-10/msg00055.html http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00011.html http://lists.opensuse.org/opensuse-updates/2013-11/msg00024.html http://lists.opensuse.org/opensuse-updates/2013-10/msg00059.html http://www.securityfocus.com/bid/62939 http://www.mail-archive.com/dev%40httpd.apache.org/msg58077.html https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=725942 https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2013-4365 https://www.debian.org/security/./dsa-2778

CVE-2013-4365

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect