RETIRED: ModSecurity CVE-2013-2765 NULL Pointer Dereference Denial of Service Vulnerability

Bugtraq ID:	60185
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	May 10 2013 12:00AM
Updated:	May 30 2013 06:44AM
Credit:	Younes Jaaidi
Vulnerable:
Not Vulnerable:

RETIRED: ModSecurity CVE-2013-2765 NULL Pointer Dereference Denial of Service Vulnerability

ModSecurity is prone to a denial-of-service vulnerability.

An attacker can exploit this issue to crash the affected application, denying service to legitimate users.

ModSecurity versions prior to 2.7.4 are vulnerable.

Note: This BID is being retired as a duplicate of the issue discussed in BID 60182 (ModSecurity CVE-2013-2765 NULL Pointer Dereference Remote Denial of Service Vulnerability).

RETIRED: ModSecurity CVE-2013-2765 NULL Pointer Dereference Denial of Service Vulnerability

An attacker can exploit this issue using a web browser.

RETIRED: ModSecurity CVE-2013-2765 NULL Pointer Dereference Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

RETIRED: ModSecurity CVE-2013-2765 NULL Pointer Dereference Denial of Service Vulnerability

References:

• ModSecurity Homepage (Breach Security)