NVD

Id
15207  
Name
CVE-2010-3872  
Description
The fcgid_header_bucket_read function in fcgid_bucket.c in the mod_fcgid module before 2.3.6 for the Apache HTTP Server does not use bytewise pointer arithmetic in certain circumstances, which has unspecified impact and attack vectors related to "untrusted FastCGI applications" and a "stack buffer overwrite."  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-11-22  
Modified Date
2012-03-20  
Seq
2010-3872  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
85651 15207 CVE-2010-3872 FEDORA-2010-17474  View
85652 15207 CVE-2010-3872 FEDORA-2010-17434  View
85653 15207 CVE-2010-3872 FEDORA-2010-17472  View
85654 15207 CVE-2010-3872 openSUSE-SU-2011:0884  View
85655 15207 CVE-2010-3872 SUSE-SU-2011:0885  View
85656 15207 CVE-2010-3872 DSA-2140  View
85657 15207 CVE-2010-3872 [apache] 20101107 [ANNOUNCE] mod_fcgid 2.3.6 is released  View
85658 15207 CVE-2010-3872 44900  View
85659 15207 CVE-2010-3872 ADV-2010-2997  View
85660 15207 CVE-2010-3872 ADV-2010-2998  View
85661 15207 CVE-2010-3872 ADV-2011-0031  View
85662 15207 CVE-2010-3872 apache-fcgid-bo(63303)  View
85663 15207 CVE-2010-3872 https://issues.apache.org/bugzilla/show_bug.cgi?id=49406  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37052 JVNDB-2010-002832 Apache mod_fcgid の apr_status_t fcgid_header_bucket_read 関数における脆弱性 Apache mod_fcgid の fcgid_bucket.c 内にある apr_status_t fcgid_header_bucket_read 関数は、ある特定の状況において bytewise pointer 演算を使用しないため、詳細不明な脆弱性が存在します。 CVE-2010-3872 46452 CVE-2010-3872 15207 7.2 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002832.html 2010-06-08 2011-06-09 View