www-apache/mod_fcgid-2.3.9-r2 — Security Advisories

portage-ng glsa

▸ GLSA 201402-09 Apache mod_fcgid: Arbitrary code execution this version unaffected normal remote 2014-02-07

A buffer overflow in Apache mod_fcgid might allow remote attackers to execute arbitrary code or cause a Denial of Service condition.

Announced: 2014-02-07
Revised: 2014-02-07
Access: remote
Bugs: #487314
Advisory: https://security.gentoo.org/glsa/201402-09

Affected packages

Package	Arch	Vulnerable	Unaffected
www-apache/mod_fcgid	*	< 2.3.9	>= 2.3.9

Background

Apache mod_fcgid is a binary-compatible alternative to mod_fastcgi with better process management.

Description

Apache mod_fcgid fails to perform a boundary check on user-supplied input, potentially resulting in a heap-based buffer overflow.

Impact

A remote attacker can supply a crafted input, possibly resulting in execution of arbitrary code or a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All Apache mod_fcgid users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-apache/mod_fcgid-2.3.9"

References

CVE-2013-4365

▸ GLSA 201207-09 mod_fcgid: Multiple vulnerabilities this version unaffected high local, remote 2012-07-09

Multiple vulnerabilities have been found in mod_fcgid, allowing execution of arbitrary code or Denial of Service.

Announced: 2012-07-09
Revised: 2012-07-09
Access: local, remote
Bugs: #344685 #409373
Advisory: https://security.gentoo.org/glsa/201207-09

Affected packages

Package	Arch	Vulnerable	Unaffected
www-apache/mod_fcgid	*	< 2.3.7	>= 2.3.7

Background

mod_fcgid is a binary-compatible alternative to mod_fastcgi with better process management.

Description

Multiple vulnerabilities have been found in mod_fcgid:

An error in the "fcgid_header_bucket_read()" function in fcgid_bucket.c could cause a stack-based buffer overflow (CVE-2010-3872).
An error in the "is_spawn_allowed() function in fcgid_spawn_ctl.c prevents Apache from recognizing the FcgidMaxProcessesPerClass directive for a virtual host (CVE-2012-1181).

Impact

A local attacker could possibly execute arbitrary code with the privileges of the process or cause a Denial of Service condition. Furthermore, a remote attacker could send specially crafted HTTP requests, possibly resulting in a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All mod_fcgid users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-apache/mod_fcgid-2.3.7"