John Sterling Mod_cplusplus Buffer Overflow Vulnerability
BID:11152
Info
John Sterling Mod_cplusplus Buffer Overflow Vulnerability
| Bugtraq ID: | 11152 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 10 2004 12:00AM |
| Updated: | Sep 10 2004 12:00AM |
| Credit: | This vulnerability was reported by the vendor. |
| Vulnerable: |
John Sterling mod_cplusplus 1.4 .0 John Sterling mod_cplusplus 1.3.1 John Sterling mod_cplusplus 1.3 John Sterling mod_cplusplus 1.2 John Sterling mod_cplusplus 1.1 .0 |
| Not Vulnerable: |
John Sterling mod_cplusplus 1.4.1 |
Discussion
John Sterling Mod_cplusplus Buffer Overflow Vulnerability
John Sterling mod_cplusplus is a framework for creating Apache modules in C++. This is designed to function in a similar fashion as mod_perl.
It is reported that mod_cplusplus contains a buffer overflow vulnerability.
This may allow attacker-supplied data to overwrite a fixed size memory buffer, corrupting adjacent memory regions. This may allow for denial of service conditions, or possible remote code execution.
Versions prior to 1.4.1 are reported susceptible to this vulnerability.
John Sterling mod_cplusplus is a framework for creating Apache modules in C++. This is designed to function in a similar fashion as mod_perl.
It is reported that mod_cplusplus contains a buffer overflow vulnerability.
This may allow attacker-supplied data to overwrite a fixed size memory buffer, corrupting adjacent memory regions. This may allow for denial of service conditions, or possible remote code execution.
Versions prior to 1.4.1 are reported susceptible to this vulnerability.
Exploit / POC
John Sterling Mod_cplusplus Buffer Overflow Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
John Sterling Mod_cplusplus Buffer Overflow Vulnerability
Solution:
The vendor has released version 1.4.1 to address this issue:
John Sterling mod_cplusplus 1.1 .0
John Sterling mod_cplusplus 1.2
John Sterling mod_cplusplus 1.3
John Sterling mod_cplusplus 1.3.1
John Sterling mod_cplusplus 1.4 .0
Solution:
The vendor has released version 1.4.1 to address this issue:
John Sterling mod_cplusplus 1.1 .0
-
John Sterling mod_cplusplus-1.4.1.tar.gz
http://prdownloads.sourceforge.net/modcplusplus/mod_cplusplus-1.4.1.ta r.gz?download
John Sterling mod_cplusplus 1.2
-
John Sterling mod_cplusplus-1.4.1.tar.gz
http://prdownloads.sourceforge.net/modcplusplus/mod_cplusplus-1.4.1.ta r.gz?download
John Sterling mod_cplusplus 1.3
-
John Sterling mod_cplusplus-1.4.1.tar.gz
http://prdownloads.sourceforge.net/modcplusplus/mod_cplusplus-1.4.1.ta r.gz?download
John Sterling mod_cplusplus 1.3.1
-
John Sterling mod_cplusplus-1.4.1.tar.gz
http://prdownloads.sourceforge.net/modcplusplus/mod_cplusplus-1.4.1.ta r.gz?download
John Sterling mod_cplusplus 1.4 .0
-
John Sterling mod_cplusplus-1.4.1.tar.gz
http://prdownloads.sourceforge.net/modcplusplus/mod_cplusplus-1.4.1.ta r.gz?download
References
John Sterling Mod_cplusplus Buffer Overflow Vulnerability
References:
References:
- File Release Notes and Changelog for version 1.4.1 (John Sterling)
- mod_cplusplus Home Page (John Sterling)