Detections
Analytics
Apache mod_ssl < 2.8.10 Off-by-one Overflow
medium Log Correlation Engine Plugin ID 800580
Synopsis
N/ADescription
The remote Apache server is running a version of mod_ssl which contains a off-by-one buffer overflow. An attacker with write access to a .htacess file could exploit this bug to execute arbitrary code on this host with the privileges the web server is running.Solution
Upgrade to mod_ssl 2.8.10 or higher.See Also
marc.theaimsgroup.com/?l=vuln-dev&m=102477330617604&w=2
marc.theaimsgroup.com/?l=bugtraq&m=102513970919836&w=2
Plugin Details
Severity: Medium
ID: 800580
Family: Web Servers
Nessus ID: 11039
Reference Information
CVE: CVE-2002-0653
BID: 5084