A remote overflow exists in Apache mod_ssl. The ssl_util_uuencode_binary fails to perform proper bounds checking resulting in a buffer overflow. With a specially crafted request, a remote attacker can execute arbitray commands on the system, resulting in a loss of confidentiality, integrity, and/or availability.
Classification
Location:
Remote / Network Access
Attack Type:
Denial of Service,
Input Manipulation
Impact:
Loss of Integrity,
Loss of Availability
Exploit:
Exploit Unknown
Solution
Upgrade to version 2.8.18 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
guninski.com -
Personal Page
