• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Mod_Security ASCIIZ Byte POST Bypass Vulnerability

Solution:
The vendor released an update and fixes to address this issue. Please see the references for more information.


mod_security mod_security 1.7

• mod_security modsecurity-apache_2.1.1.tar.gz
  http://www.modsecurity.org/download/modsecurity-apache_2.1.1.tar.gz

mod_security mod_security 1.7.1

• mod_security modsecurity-apache_2.1.1.tar.gz
  http://www.modsecurity.org/download/modsecurity-apache_2.1.1.tar.gz

mod_security mod_security 1.7.2

• mod_security modsecurity-apache_2.1.1.tar.gz
  http://www.modsecurity.org/download/modsecurity-apache_2.1.1.tar.gz

mod_security mod_security 1.7.4

• mod_security modsecurity-apache_2.1.1.tar.gz
  http://www.modsecurity.org/download/modsecurity-apache_2.1.1.tar.gz

mod_security mod_security 1.7.5

• mod_security modsecurity-apache_2.1.1.tar.gz
  http://www.modsecurity.org/download/modsecurity-apache_2.1.1.tar.gz

mod_security mod_security 1.9.4

• mod_security modsec-1_9_4-asciiz.patch
  http://www.modsecurity.org/download/modsec-1_9_4-asciiz.patch


• mod_security modsecurity-apache_2.1.1.tar.gz
  http://www.modsecurity.org/download/modsecurity-apache_2.1.1.tar.gz

mod_security mod_security 2.1

• mod_security modsecurity-apache_2.1.1.tar.gz
  http://www.modsecurity.org/download/modsecurity-apache_2.1.1.tar.gz