CIA RESEARCH

Alerts

[CIA-1061-Alert] Apache Off-by-One Code Execution

Summary:

A vulnerability in versions of Apache allows an attacker to execute arbitrary code due to a bug in mod_rewrite.

Technical Details:

A vulnerability was reported in Apache's mod_rewrite that allows a remote attacker to execute arbitrary code with the privileges of the HTTP Process. A remote user can trigger an off-by-one error in the processing of certain types of rewrite rules, causing the web server to execute arbitrary code with the privileges of the HTTP Process. This vulnerability affects versions 1.3.37 (and prior) and 2.0.59 (and prior). The Impact of the vulnerability may change depending upon how Apache was compiled. For additional information, see the links below:

http://httpd.apache.org/security/vulnerabilities_20.html
http://httpd.apache.org/security/vulnerabilities_13.html

Solution:

CVE Reference:

CVE-2006-3747

SecurityTracker Number(s):

1016601

Vendor URL:

About the Cenzic CIA Team:

Cenzic Intelligent Analysis (CIA) is Cenzic's research arm that focuses on continuous research for application vulnerabilities. Industry Research, Vulnerability assessment, penetration testing, and security testing - that's what Cenzic Intelligent Analysis Research is all about. Cenzic has dedicated experts whose sole job is to perform ongoing research to find not only common vulnerabilities but also vulnerabilities found in customer applications and make them available to our customers and to the community at large.

About Cenzic:

Cenzic provides Hailstorm® the revolutionary enterprise software suite for automated application security assessment and compliance that allows corporations and government organizations to dramatically improve the security of commercial and custom applications. Hailstorm enables security experts, QA professionals, and developers to work together to assess, analyze, and remediate applications for security vulnerabilities, and verify compliance with security policies. Benefits include reduced security risk and liability, lower development and testing costs, and faster time-to-market. Cenzic's customers are currently in the financial services and e-marketplaces sectors. For more information visit www.cenzic.com or call 1-866-4-CENZIC