Gentoo: GLSA-202310-01 Critical: ModSecurity Exploit Vulnerability

Gentoo Linux Security Advisory GLSA 200907-02 https://security.gentoo.org/ Severity: Normal Title: ModSecurity: Denial of Service Date: July 02, 2009 Bugs: #262302 ID: 200907-02

Synopsis ======= Two vulnerabilities in ModSecurity might lead to a Denial of Service.
Background ========= ModSecurity is a popular web application firewall for the Apache HTTP server.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 www-apache/mod_security < 2.5.9 >= 2.5.9
========== Multiple vulnerabilities were discovered in ModSecurity:
* Juan Galiana Lara of ISecAuditors discovered a NULL pointer dereference when processing multipart requests without a part header name (CVE-20...