PT-2013-4975

CVE-2013-4365

·

Published

2013-10-17

·

Updated

2024-06-15

Description by

CVSS 2.0
7.5
High
MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions mod fcgid module versions prior to 2.3.9 for the Apache HTTP Server
Description A heap-based buffer overflow issue exists in the fcgid header bucket read function in fcgid bucket.c, allowing remote attackers to have an unspecified impact via unknown vectors.
Recommendations For mod fcgid module versions prior to 2.3.9, update to version 2.3.9 or later to resolve the issue. As a temporary workaround, consider restricting access to the mod fcgid module until a patch is available.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
DSA-2778-1
MGASA-2013-0313
OPENSUSE-SU-2024:10564-1
SUSE-SU-2013_1667-1
Found an issue in the description? Have something to add? Feel free to write us 👾