This script is Copyright (C) 2005-2014 Tenable Network Security, Inc.
The remote FreeBSD host is missing a security-related update.
An LSS Security Advisory reports :
When a denial of service attack is detected, mod_dosevasive will,
among other things, create a temporary file which it will use to trace
actions from the offensive IP address. This file is insecurely created
in /tmp and it's name is easily predictable.
It is then easy for an attacker to create arbitrary files in any
directory that the user under which apache runs has privileges to
[...] once the target file is opened, there is a race attack (although
difficult to exploit) which can lead to mod_dosevasive overwriting any
file that the user under which apache runs has privileges to write.
See also :
Update the affected package.
Risk factor :
Family: FreeBSD Local Security Checks
Nessus Plugin ID: 19018 (freebsd_pkg_88ff90f26e4311d98c87000a95bc6fae.nasl)
Get Nessus Professional to scan unlimited IPs, run compliance checks & moreBuy Nessus Professional Now