Improved mod_frontpage Buffer Overflow Vulnerability

Bugtraq ID:	4251
Class:	Boundary Condition Error
CVE:	CVE-2002-0427
Remote:	Yes
Local:	No
Published:	Mar 08 2002 12:00AM
Updated:	Jul 11 2009 10:56AM
Credit:	Credited to MandrakeSoft.
Vulnerable:	Christof Pohl Improved mod_frontpage 1.5.1 - Apache Apache 1.3.23 - Apache Apache 1.3.22 - Apache Apache 1.3.20 - Apache Apache 1.3.19 - Apache Apache 1.3.18 - Apache Apache 1.3.17 - Apache Apache 1.3.14 - Apache Apache 1.3.12 - Apache Apache 1.3.11 - Apache Apache 1.3.9 - Apache Apache 1.3.4 - Apache Apache 1.3.3 - Apache Apache 1.3.1 - Apache Apache 1.3 + Mandriva Linux Mandrake 8.1 ia64 + Mandriva Linux Mandrake 8.1 + Mandriva Linux Mandrake 8.0 ppc + Mandriva Linux Mandrake 8.0 Christof Pohl Improved mod_frontpage 1.5 - Apache Apache 1.3.23 - Apache Apache 1.3.22 - Apache Apache 1.3.20 - Apache Apache 1.3.19 - Apache Apache 1.3.18 - Apache Apache 1.3.17 - Apache Apache 1.3.14 - Apache Apache 1.3.12 - Apache Apache 1.3.11 - Apache Apache 1.3.9 - Apache Apache 1.3.4 - Apache Apache 1.3.3 - Apache Apache 1.3.1 - Apache Apache 1.3 Christof Pohl Improved mod_frontpage 1.4.1 - Apache Apache 1.3.23 - Apache Apache 1.3.22 - Apache Apache 1.3.20 - Apache Apache 1.3.19 - Apache Apache 1.3.18 - Apache Apache 1.3.17 - Apache Apache 1.3.14 - Apache Apache 1.3.12 - Apache Apache 1.3.11 - Apache Apache 1.3.9 - Apache Apache 1.3.4 - Apache Apache 1.3.3 - Apache Apache 1.3.1 - Apache Apache 1.3 Christof Pohl Improved mod_frontpage 1.3.2 - Apache Apache 1.3.23 - Apache Apache 1.3.22 - Apache Apache 1.3.20 - Apache Apache 1.3.19 - Apache Apache 1.3.18 - Apache Apache 1.3.17 - Apache Apache 1.3.14 - Apache Apache 1.3.12 - Apache Apache 1.3.11 - Apache Apache 1.3.9 - Apache Apache 1.3.4 - Apache Apache 1.3.3 - Apache Apache 1.3.1 - Apache Apache 1.3 Christof Pohl Improved mod_frontpage 1.3.1 - Apache Apache 1.3.23 - Apache Apache 1.3.22 - Apache Apache 1.3.20 - Apache Apache 1.3.19 - Apache Apache 1.3.18 - Apache Apache 1.3.17 - Apache Apache 1.3.14 - Apache Apache 1.3.12 - Apache Apache 1.3.11 - Apache Apache 1.3.9 - Apache Apache 1.3.4 - Apache Apache 1.3.3 - Apache Apache 1.3.1 - Apache Apache 1.3
Not Vulnerable:	Christof Pohl Improved mod_frontpage 1.6.1

Improved mod_frontpage Buffer Overflow Vulnerability

Improved mod_frontpage is a module for the Apache webserver that allows for enhanced webserver interaction with the Frontpage client.

Improved mod_frontpage is susceptible to a buffer overflow condition that may allow for remote attackers to compromise the webserver. The bug is reportedly present in the fp_exec.c component and is due to insufficient bounds checking on memory-copy operations.