CVE-2009-5031

概要

参考情報

• blog.ivanristic.com/2012/06/modsecurity-and-modsecurity-core-rule-set-multipart-bypasses.html · Third Party Advisory
• lists.opensuse.org/opensuse-updates/2013-08/msg00020.html · Mailing List
• lists.opensuse.org/opensuse-updates/2013-08/msg00025.html · Mailing List
• lists.opensuse.org/opensuse-updates/2013-08/msg00031.html · Mailing List
• mod-security.svn.sourceforge.net/viewvc/mod-security/m2/branches/2.6.x/CHANGES · Broken Link
• secunia.com/advisories/49576 · Third Party Advisory
• openwall.com/lists/oss-security/2012/06/22/1 · Mailing List
• openwall.com/lists/oss-security/2012/06/22/2 · Mailing List
• securityfocus.com/bid/54156 · Third Party Advisory
• suspekt.org/downloads/POC2009-ShockingNewsInPHPExploitation.pdf · Third Party Advisory

modsecurity のその他の脆弱性

• CVE-2025-47947高 7.5ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions up to and including …
• CVE-2025-27110高 7.5Libmodsecurity is one component of the ModSecurity v3 project. The library codebase serves as an interface to ModSecurity Connectors taking …
• CVE-2024-46292高 7.5A buffer overflow in modsecurity v3.0.12 allows attackers to cause a Denial of Service (DoS) via a crafted input inserted into the name para…
• CVE-2023-24021高 7.5Incorrect handling of '\0' bytes in file uploads in ModSecurity before 2.9.7 may allow for Web Application Firewall bypasses and buffer over…
• CVE-2022-48279高 7.5In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firew…