Debian DSA-2506-1 : libapache-mod-security - ModSecurity bypass

medium Nessus Plugin ID 59825

Language:

Synopsis

The remote Debian host is missing a security-related update.

Description

Qualys Vulnerability & Malware Research Labs discovered a vulnerability in ModSecurity, a security module for the Apache webserver. In situations where both 'Content:Disposition: attachment' and 'Content-Type: multipart' were present in HTTP headers, the vulnerability could allow an attacker to bypass policy and execute cross-site script (XSS) attacks through properly crafted HTML documents.

Solution

Upgrade the libapache-mod-security packages.

For the stable distribution (squeeze), this problem has been fixed in version 2.5.12-1+squeeze1.

In testing and unstable distribution, the source package has been renamed to modsecurity-apache.

Plugin Details

Severity: Medium

ID: 59825

File Name: debian_DSA-2506.nasl

Version: 1.14

Type: local

Agent: unix

Family: Debian Local Security Checks

Published: 7/3/2012

Updated: 1/11/2021

Supported Sensors: Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.8

CVSS v2

Risk Factor: Medium

Base Score: 4.3

Temporal Score: 3.2

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Information

CPE: p-cpe:/a:debian:debian_linux:libapache-mod-security, cpe:/o:debian:debian_linux:6.0

Required KB Items: Host/local_checks_enabled, Host/Debian/release, Host/Debian/dpkg-l

Exploit Ease: No known exploits are available

Patch Publication Date: 7/2/2012

Reference Information

CVE: CVE-2012-2751

BID: 54156

DSA: 2506

Detections

Analytics