NVD

Id
49167  
Name
CVE-2009-1902  
Description
The multipart processor in ModSecurity before 2.5.9 allows remote attackers to cause a denial of service (crash) via a multipart form datapost request with a missing part header name, which triggers a NULL pointer dereference.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-07  
Published
2009-06-03  
Modified Date
2009-07-15  
Seq
2009-1902  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
248940 49167 CVE-2009-1902 SUSE-SR:2009:011  View
248941 49167 CVE-2009-1902 GLSA-200907-02  View
248942 49167 CVE-2009-1902 http://sourceforge.net/project/shownotes.php?release_id=667542&group_id=68846  View
248943 49167 CVE-2009-1902 8241  View
248944 49167 CVE-2009-1902 20090319 [ISecAuditors Security Advisories] ModSecurity < 2.5.9 remote Denial of Service  View
248945 49167 CVE-2009-1902 34096  View
248946 49167 CVE-2009-1902 ADV-2009-0703  View
248947 49167 CVE-2009-1902 modsecurity-multipart-dos(49212)  View
248948 49167 CVE-2009-1902 FEDORA-2009-2654  View
248949 49167 CVE-2009-1902 FEDORA-2009-2686  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41647 JVNDB-2009-002654 ModSecurity の multipart processor におけるサービス運用妨害 (DoS) の脆弱性 ModSecurity の multipart processor には、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2009-1902 39333 CVE-2009-1902 49167 7.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002654.html 2009-03-12 2011-06-07 View