Apache mod_jk2 Host Header Multiple Stack Based Buffer Overflow Vulnerabilities

Bugtraq ID:	27752
Class:	Boundary Condition Error
CVE:	CVE-2007-6258
Remote:	Yes
Local:	No
Published:	Feb 12 2008 12:00AM
Updated:	Oct 27 2010 11:38AM
Credit:	IOActive Security discovered these issues.
Vulnerable:	Fujitsu INTERSTAGE Studio Standard-J Edition 9.0 Fujitsu INTERSTAGE Studio Standard-J Edition 8.0.1 Fujitsu INTERSTAGE Studio Enterprise Edition 9.0 Fujitsu INTERSTAGE Studio Enterprise Edition 8.0.1 Fujitsu INTERSTAGE Job Workload Server 8.1 Fujitsu Interstage Business Application Server Enterprise Edition 8.0 Fujitsu INTERSTAGE Apworks Modelers-J Edition 7.0 Fujitsu INTERSTAGE Apworks Modelers-J Edition 6.0A Fujitsu INTERSTAGE Apworks Modelers-J Edition 6.0 Fujitsu INTERSTAGE Application Server Standard-J Edition 9.0 A Fujitsu INTERSTAGE Application Server Standard-J Edition 9.0 Fujitsu INTERSTAGE Application Server Standard-J Edition 8.0.2 Fujitsu INTERSTAGE Application Server Standard-J Edition 8.0.1 Fujitsu INTERSTAGE Application Server Standard-J Edition 8.0 Fujitsu INTERSTAGE Application Server Plus Developer 7.0 Fujitsu INTERSTAGE Application Server Plus Developer 6.0 Fujitsu Interstage Application Server Plus 7.0.1 Fujitsu Interstage Application Server Plus 7.0 Fujitsu Interstage Application Server Plus 6.0 Fujitsu INTERSTAGE Application Server Enterprise Edition 9.0 A Fujitsu INTERSTAGE Application Server Enterprise Edition 9.0 Fujitsu INTERSTAGE Application Server Enterprise Edition 8.0.2 Fujitsu INTERSTAGE Application Server Enterprise Edition 8.0.1 Fujitsu INTERSTAGE Application Server Enterprise Edition 8.0 Fujitsu INTERSTAGE Application Server Enterprise Edition 7.0.1 Fujitsu INTERSTAGE Application Server Enterprise Edition 7.0 Fujitsu INTERSTAGE Application Server Enterprise Edition 6.0 F5 BigIP 9.2.3 .30 Apache Software Foundation mod_jk2 2.0.2 Apache Software Foundation mod_jk2 2.0.1 Apache Software Foundation mod_jk2 2.0 Apache Software Foundation mod_jk2 2.0.3-DEV
Not Vulnerable:	Apache Software Foundation mod_jk2 2.0.4

Apache mod_jk2 Host Header Multiple Stack Based Buffer Overflow Vulnerabilities

Apache mod_jk2 is prone to multiple stack-based buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied data before copying it to insufficiently sized buffers.

Successful exploits may allow attackers to execute arbitrary code in the context of a vulnerable application; failed attempts will likely cause denial-of-service conditions.

Versions prior to mod_jk2 2.0.4 are vulnerable.

NOTE: mod_jk2 is a legacy branch of mod_jk that is now deprecated; mod_jk is a currently supported module and is reportedly unaffected by these issues.

Apache mod_jk2 Host Header Multiple Stack Based Buffer Overflow Vulnerabilities

An exploit is available.

• /data/vulnerabilities/exploits/27752.cpp
• /data/vulnerabilities/exploits/27752.tar.gz

Apache mod_jk2 Host Header Multiple Stack Based Buffer Overflow Vulnerabilities

Solution:
The vendor has released updates to address these issues. Please see the references for more information.


Apache Software Foundation mod_jk2 2.0.3-DEV

• Apache Software Foundation jakarta-tomcat-connectors-jk2-2.0.4-src.tar.gz
  http://archive.apache.org/dist/jakarta/tomcat-connectors/jk2/source/ja karta-tomcat-connectors-jk2-2.0.4-src.tar.gz

Apache Software Foundation mod_jk2 2.0

• Apache Software Foundation jakarta-tomcat-connectors-jk2-2.0.4-src.tar.gz
  http://archive.apache.org/dist/jakarta/tomcat-connectors/jk2/source/ja karta-tomcat-connectors-jk2-2.0.4-src.tar.gz

Apache mod_jk2 Host Header Multiple Stack Based Buffer Overflow Vulnerabilities

References:

• Interstage Application Server: Buffer Overflow Vulnerability(CVE-2007-6258). Oct (Fujitsu)
  
• Tomcat Connectors (mod_jk) Downloads (Apache Software Foundation)
  
• IOActive Security Advisory: Legacy mod_jk2 Buffer Overflow (IOActive Advisories )