Heap-based buffer overflow in the fcgid_header_bucket_read function in fcgid_bucket.c in the mod_fcgid module before 2.3.9 for the Apache HTTP Server allows remote attackers to have an unspecified impact via unknown vectors.

The remote Solaris system is missing necessary patches to address security updates :

  - Heap-based buffer overflow in the     fcgid_header_bucket_read function in fcgid_bucket.c in     the mod_fcgid module before 2.3.9 for the Apache HTTP     Server allows remote attackers to have an unspecified     impact via unknown vectors. (CVE-2013-4365)

security issue fixed in apache2-mod_fcgid :

loop counter handled incorrectly, leading to SEGV and 'Premature end of script headers' errors. [bnc#844935] CVE-2013-4365 This patch will be obsoleted by the next version update (to 2.3.9 or higher).

the following security issue was fixed in apache2-mod_fcgid :

  - fixes a heap overflow identified by CVE-2013-4365     [bnc#844935].

The remote host is affected by the vulnerability described in GLSA-201402-09 (Apache mod_fcgid: Arbitrary code execution)

    Apache mod_fcgid fails to perform a boundary check on user-supplied       input, potentially resulting in a heap-based buffer overflow.
  Impact :

    A remote attacker can supply a crafted input, possibly resulting in       execution of arbitrary code or a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

According to its self-reported banner, the Apache web server listening on this port includes a version of the mod_fcgid module earlier than 2.3.9.  That reportedly has a heap-based buffer overflow vulnerability because of an error in the pointer arithmetic used in the 'fcgid_header_bucket_read()' function.

Updated apache-mod_fcgid package fixes security vulnerability :

Apache mod_fcgid before version 2.3.9 fails to perform adequate boundary checks on user-supplied input. This may allow a remote attacker to cause a heap-based buffer overflow, resulting in a denial of service or potentially allowing the execution of arbitrary code (CVE-2013-4365).

Current upstream maintenance release, including a security fix for a possible heap buffer overwrite issue (CVE-2013-4365).

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Versions of Apache 'mod_fcgid' module earlier than 2.3.9 are vulnerable to a heap overflow vulnerability due to insufficient user input boundary validation, specifically to the 'fcgid_header_bucket_read()' function as called from the modules/fcgid/fcgid_bucket.c source file. An attacker may leverage this to execute arbitrary code in the context of the server application, or cause denial of service. 

Robert Matthews discovered that the Apache FCGID module, a FastCGI implementation for Apache HTTP Server, fails to perform adequate boundary checks on user-supplied input. This may allow a remote attacker to cause a heap-based buffer overflow, resulting in a denial of service or potentially allowing the execution of arbitrary code.

Apache Project reports :

Fix possible heap buffer overwrite.

ID	Name	Product	Family	Severity
80586	Oracle Solaris Third-Party Patch Update : apache (cve_2013_4365_buffer_errors)	Nessus	Solaris Local Security Checks	medium
75195	openSUSE Security Update : apache2-mod_fcgid (openSUSE-SU-2013:1664-1)	Nessus	SuSE Local Security Checks	medium
75180	openSUSE Security Update : apache2-mod_fcgid (openSUSE-SU-2013:1609-1)	Nessus	SuSE Local Security Checks	medium
72409	GLSA-201402-09 : Apache mod_fcgid: Arbitrary code execution	Nessus	Gentoo Local Security Checks	medium
70901	Amazon Linux AMI : mod24_fcgid (ALAS-2013-239)	Nessus	Amazon Linux Local Security Checks	medium
70900	Amazon Linux AMI : mod_fcgid (ALAS-2013-238)	Nessus	Amazon Linux Local Security Checks	medium
70682	Apache mod_fcgid Module < 2.3.9 fcgid_header_bucket_read() Function Heap-Based Buffer Overflow	Nessus	Web Servers	medium
70523	Mandriva Linux Security Advisory : apache-mod_fcgid (MDVSA-2013:256)	Nessus	Mandriva Local Security Checks	medium
70510	Fedora 18 : mod_fcgid-2.3.9-1.fc18 (2013-18686)	Nessus	Fedora Local Security Checks	medium
70509	Fedora 19 : mod_fcgid-2.3.9-1.fc19 (2013-18638)	Nessus	Fedora Local Security Checks	medium
8028	Apache 'mod_fcgid' Module Heap Buffer Overflow Vulnerability	Nessus Network Monitor	Web Servers	high
70431	Fedora 20 : mod_fcgid-2.3.9-1.fc20 (2013-18579)	Nessus	Fedora Local Security Checks	medium
70403	Debian DSA-2778-1 : libapache2-mod-fcgid - heap-based buffer overflow	Nessus	Debian Local Security Checks	medium
70379	FreeBSD : mod_fcgid -- possible heap buffer overwrite (9003b500-31e3-11e3-b0d0-20cf30e32f6d)	Nessus	FreeBSD Local Security Checks	medium

Detections

Analytics

CVE-2013-4365

critical

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

high

medium

medium

medium