Apache mod_jk2 Host Header Multiple Buffer Overflow Vulnerabilities


Description   Multiple vulnerabilities have been identified in mod_jk2 for Apache, which could be exploited by remote attackers to cause a denial of service or compromise an affected web server. These issues are caused by buffer overflow errors when processing requests containing a malformed or overly long "Host" header, which could be exploited by remote attackers to crash an affected server or execute arbitrary code via a specially crafted request.
     
Vulnerable Products   Vulnerable Software:
mod_jk2 versions prior to 2.0.4
     
Solution   Upgrade to mod_jk2 version 2.0.4 or later : http://tomcat.apache.org/download-connectors.cgi
     
CVE   CVE-2007-6258
     
References   http://www.ioactive.com/vulnerabilities/mod_jk2LegacyBufferOverflowAdvisory.pdf
     
Vulnerability Manager Detection   Yes (since ASQ v3.5.0)
     
IPS Protection  
ASQ Engine alarm Available Since
Possible buffer overflow in HTTP request/reply
3.2.0
     


 
 
 
 
 Risk level 
Critical 

 Vulnerability First Public Report Date 
2008-02-15 

 Target Type 
Server 

 Possible exploit 
Local & Remote