gsd-2010-3872
Vulnerability from gsd
Modified
2023-12-13 01:21
Details
A flaw was found in the mod_fcgid module of httpd. A malformed FastCGI response may result in a stack-based buffer overflow in the modules/fcgid/fcgid_bucket.c file in the fcgid_header_bucket_read() function, resulting in an application crash.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2010-3872",
"description": "The fcgid_header_bucket_read function in fcgid_bucket.c in the mod_fcgid module before 2.3.6 for the Apache HTTP Server does not use bytewise pointer arithmetic in certain circumstances, which has unspecified impact and attack vectors related to \"untrusted FastCGI applications\" and a \"stack buffer overwrite.\"",
"id": "GSD-2010-3872",
"references": [
"https://www.suse.com/security/cve/CVE-2010-3872.html",
"https://www.debian.org/security/2011/dsa-2140"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2010-3872"
],
"details": "A flaw was found in the mod_fcgid module of httpd. A malformed FastCGI response may result in a stack-based buffer overflow in the modules/fcgid/fcgid_bucket.c file in the fcgid_header_bucket_read() function, resulting in an application crash.",
"id": "GSD-2010-3872",
"modified": "2023-12-13T01:21:34.455997Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2010-3872",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "mod_fcgid",
"version": {
"version_data": [
{
"version_value": "not down converted",
"x_cve_json_5_version_data": {
"versions": [
{
"status": "unaffected",
"version": "2.3.6"
}
]
}
}
]
}
}
]
},
"vendor_name": "n/a"
},
{
"product": {
"product_data": [
{
"product_name": "Red Hat Enterprise Linux 7",
"version": {
"version_data": [
{
"version_value": "not down converted",
"x_cve_json_5_version_data": {
"defaultStatus": "unaffected"
}
}
]
}
},
{
"product_name": "Red Hat Enterprise Linux 8",
"version": {
"version_data": [
{
"version_value": "not down converted",
"x_cve_json_5_version_data": {
"defaultStatus": "unaffected"
}
}
]
}
},
{
"product_name": "Red Hat Enterprise Linux 9",
"version": {
"version_data": [
{
"version_value": "not down converted",
"x_cve_json_5_version_data": {
"defaultStatus": "unaffected"
}
}
]
}
}
]
},
"vendor_name": "Red Hat"
},
{
"product": {
"product_data": [
{
"product_name": "Fedora",
"version": {
"version_data": [
{
"version_value": "not down converted",
"x_cve_json_5_version_data": {
"defaultStatus": "unaffected"
}
}
]
}
}
]
},
"vendor_name": "Fedora"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "A flaw was found in the mod_fcgid module of httpd. A malformed FastCGI response may result in a stack-based buffer overflow in the modules/fcgid/fcgid_bucket.c file in the fcgid_header_bucket_read() function, resulting in an application crash."
}
]
},
"impact": {
"cvss": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"cweId": "CWE-121",
"lang": "eng",
"value": "Stack-based Buffer Overflow"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050930.html",
"refsource": "MISC",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050930.html"
},
{
"name": "http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050932.html",
"refsource": "MISC",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050932.html"
},
{
"name": "http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050976.html",
"refsource": "MISC",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050976.html"
},
{
"name": "http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00004.html",
"refsource": "MISC",
"url": "http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00004.html"
},
{
"name": "http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00005.html",
"refsource": "MISC",
"url": "http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00005.html"
},
{
"name": "http://osvdb.org/69275",
"refsource": "MISC",
"url": "http://osvdb.org/69275"
},
{
"name": "http://secunia.com/advisories/42288",
"refsource": "MISC",
"url": "http://secunia.com/advisories/42288"
},
{
"name": "http://secunia.com/advisories/42302",
"refsource": "MISC",
"url": "http://secunia.com/advisories/42302"
},
{
"name": "http://secunia.com/advisories/42815",
"refsource": "MISC",
"url": "http://secunia.com/advisories/42815"
},
{
"name": "http://www.debian.org/security/2010/dsa-2140",
"refsource": "MISC",
"url": "http://www.debian.org/security/2010/dsa-2140"
},
{
"name": "http://www.gossamer-threads.com/lists/apache/announce/391406",
"refsource": "MISC",
"url": "http://www.gossamer-threads.com/lists/apache/announce/391406"
},
{
"name": "http://www.securityfocus.com/bid/44900",
"refsource": "MISC",
"url": "http://www.securityfocus.com/bid/44900"
},
{
"name": "http://www.vupen.com/english/advisories/2010/2997",
"refsource": "MISC",
"url": "http://www.vupen.com/english/advisories/2010/2997"
},
{
"name": "http://www.vupen.com/english/advisories/2010/2998",
"refsource": "MISC",
"url": "http://www.vupen.com/english/advisories/2010/2998"
},
{
"name": "http://www.vupen.com/english/advisories/2011/0031",
"refsource": "MISC",
"url": "http://www.vupen.com/english/advisories/2011/0031"
},
{
"name": "https://access.redhat.com/security/cve/CVE-2010-3872",
"refsource": "MISC",
"url": "https://access.redhat.com/security/cve/CVE-2010-3872"
},
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=2248172",
"refsource": "MISC",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2248172"
},
{
"name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/63303",
"refsource": "MISC",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/63303"
},
{
"name": "https://github.com/apache/httpd-mod_fcgid/commit/b1afa70840b4ab4e6fbc12ac8798b2f3ccc336b2",
"refsource": "MISC",
"url": "https://github.com/apache/httpd-mod_fcgid/commit/b1afa70840b4ab4e6fbc12ac8798b2f3ccc336b2"
},
{
"name": "https://issues.apache.org/bugzilla/show_bug.cgi?id=49406",
"refsource": "MISC",
"url": "https://issues.apache.org/bugzilla/show_bug.cgi?id=49406"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:apache:mod_fcgid:2.3.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:apache:mod_fcgid:2.3.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:apache:mod_fcgid:2.3.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:apache:mod_fcgid:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "2.3.5",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:apache:mod_fcgid:2.3.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2010-3872"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "A flaw was found in the mod_fcgid module of httpd. A malformed FastCGI response may result in a stack-based buffer overflow in the modules/fcgid/fcgid_bucket.c file in the fcgid_header_bucket_read() function, resulting in an application crash."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-189"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "FEDORA-2010-17474",
"refsource": "FEDORA",
"tags": [],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050930.html"
},
{
"name": "FEDORA-2010-17472",
"refsource": "FEDORA",
"tags": [],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050976.html"
},
{
"name": "FEDORA-2010-17434",
"refsource": "FEDORA",
"tags": [],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050932.html"
},
{
"name": "ADV-2010-2998",
"refsource": "VUPEN",
"tags": [
"Vendor Advisory"
],
"url": "http://www.vupen.com/english/advisories/2010/2998"
},
{
"name": "42288",
"refsource": "SECUNIA",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/42288"
},
{
"name": "42302",
"refsource": "SECUNIA",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/42302"
},
{
"name": "ADV-2010-2997",
"refsource": "VUPEN",
"tags": [
"Vendor Advisory"
],
"url": "http://www.vupen.com/english/advisories/2010/2997"
},
{
"name": "69275",
"refsource": "OSVDB",
"tags": [],
"url": "http://osvdb.org/69275"
},
{
"name": "[apache] 20101107 [ANNOUNCE] mod_fcgid 2.3.6 is released",
"refsource": "MLIST",
"tags": [],
"url": "http://www.gossamer-threads.com/lists/apache/announce/391406"
},
{
"name": "https://issues.apache.org/bugzilla/show_bug.cgi?id=49406",
"refsource": "CONFIRM",
"tags": [
"Patch"
],
"url": "https://issues.apache.org/bugzilla/show_bug.cgi?id=49406"
},
{
"name": "42815",
"refsource": "SECUNIA",
"tags": [],
"url": "http://secunia.com/advisories/42815"
},
{
"name": "ADV-2011-0031",
"refsource": "VUPEN",
"tags": [],
"url": "http://www.vupen.com/english/advisories/2011/0031"
},
{
"name": "44900",
"refsource": "BID",
"tags": [],
"url": "http://www.securityfocus.com/bid/44900"
},
{
"name": "DSA-2140",
"refsource": "DEBIAN",
"tags": [],
"url": "http://www.debian.org/security/2010/dsa-2140"
},
{
"name": "openSUSE-SU-2011:0884",
"refsource": "SUSE",
"tags": [],
"url": "http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00004.html"
},
{
"name": "SUSE-SU-2011:0885",
"refsource": "SUSE",
"tags": [],
"url": "http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00005.html"
},
{
"name": "apache-fcgid-bo(63303)",
"refsource": "XF",
"tags": [],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/63303"
},
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=2248172",
"refsource": "MISC",
"tags": [],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2248172"
},
{
"name": "https://access.redhat.com/security/cve/CVE-2010-3872",
"refsource": "MISC",
"tags": [],
"url": "https://access.redhat.com/security/cve/CVE-2010-3872"
},
{
"name": "https://github.com/apache/httpd-mod_fcgid/commit/b1afa70840b4ab4e6fbc12ac8798b2f3ccc336b2",
"refsource": "",
"tags": [],
"url": "https://github.com/apache/httpd-mod_fcgid/commit/b1afa70840b4ab4e6fbc12ac8798b2f3ccc336b2"
}
]
}
},
"impact": {
"baseMetricV2": {
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 7.2,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 3.9,
"impactScore": 10.0,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "HIGH",
"userInteractionRequired": false
}
},
"lastModifiedDate": "2023-11-07T20:15Z",
"publishedDate": "2010-11-22T12:54Z"
}
}
}
Loading...
Loading...
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.