• info
• discussion
• exploit
• solution
• references

Mod_Security ASCIIZ Byte POST Bypass Vulnerability

Solution:
The vendor released an update and fixes to address this issue. Please see the references for more information.


mod_security mod_security 1.7

• mod_security modsecurity-apache_2.1.1.tar.gz
  http://www.modsecurity.org/download/modsecurity-apache_2.1.1.tar.gz

mod_security mod_security 1.7.1

• mod_security modsecurity-apache_2.1.1.tar.gz
  http://www.modsecurity.org/download/modsecurity-apache_2.1.1.tar.gz

mod_security mod_security 1.7.2

• mod_security modsecurity-apache_2.1.1.tar.gz
  http://www.modsecurity.org/download/modsecurity-apache_2.1.1.tar.gz

mod_security mod_security 1.7.4

• mod_security modsecurity-apache_2.1.1.tar.gz
  http://www.modsecurity.org/download/modsecurity-apache_2.1.1.tar.gz

mod_security mod_security 1.7.5

• mod_security modsecurity-apache_2.1.1.tar.gz
  http://www.modsecurity.org/download/modsecurity-apache_2.1.1.tar.gz

mod_security mod_security 1.9.4

• mod_security modsec-1_9_4-asciiz.patch
  http://www.modsecurity.org/download/modsec-1_9_4-asciiz.patch


• mod_security modsecurity-apache_2.1.1.tar.gz
  http://www.modsecurity.org/download/modsecurity-apache_2.1.1.tar.gz

mod_security mod_security 2.1

• mod_security modsecurity-apache_2.1.1.tar.gz
  http://www.modsecurity.org/download/modsecurity-apache_2.1.1.tar.gz