CVE-2012-4528 The mod_security2 module before 2.7.0 for the Apache HTTP Server allows remote attackers to bypass rules, and deliver arbitrary POST data to a PHP application, via a multipart request in which an inva...
MediumCVSS 5.0
EPSS 12.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The mod_security2 module before 2.7.0 for the Apache HTTP Server allows remote attackers to bypass rules, and deliver arbitrary POST data to a PHP application, via a multipart request in which an invalid part precedes the crafted data.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/modsecurity-apache(Debian:12) | < 2.6.6-5 | 2.6.6-5 |
| debian/modsecurity-apache(Debian:13) | < 2.6.6-5 | 2.6.6-5 |
| debian/modsecurity-apache(Debian:14) | < 2.6.6-5 | 2.6.6-5 |
| trustwave modsecurity | < 2.7.0 | 2.7.0 |
| opensuse | = 11.4 | No fix listed |
| opensuse | = 12.2 | No fix listed |
| opensuse | = 12.3 | No fix listed |
| fedoraproject fedora | = 18 | No fix listed |
References
- Debian Security Tracker CVE-2012-4528 vendor-advisory
- bugs.debian.org issue-tracking
- FEDORA-2012-18278 third-party-advisory vendor-advisory
- openSUSE-SU-2013:1331 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2013:1336 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2013:1342 mailing-list third-party-advisory vendor-advisory
- mod-security.svn.sourceforge.net broken-link
- mod-security.svn.sourceforge.net broken-link
- mod-security.svn.sourceforge.net broken-link
- 20121017 SEC Consult SA-20121017-0 :: ModSecurity multipart/invalid part ruleset bypass exploit mailing-list third-party-advisory
- [oss-security] 20121018 Re: CVE request: Fwd: [Full-disclosure] SEC Consult SA-20121017-0 :: ModSecurity multipart/invalid part ruleset bypass mailing-list third-party-advisory
- www.sec-consult.com third-party-advisory