Gentoo: GLSA-200705-17 Low: mod_security Remote Rule Bypass

Gentoo Linux Security Advisory GLSA 200705-17 https://security.gentoo.org/ Severity: Low Title: Apache mod_security: Rule bypass Date: May 17, 2007 Bugs: #169778 ID: 200705-17

Synopsis ======= A vulnerability has been discovered in mod_security, allowing a remote attacker to bypass rules.
Background ========= mod_security is an Apache module designed for enhancing the security of the Apache web server.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-www/mod_security < 2.1.1 >= 2.1.1
========== Stefan Esser discovered that mod_security processes NULL characters as terminators in POST requests using the application/x-www-form-urlencoded encoding type, whi...