Vulnerabilities > CVE-2002-0427 - Unspecified vulnerability in Christof Pohl Improved MOD Frontpage

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
christof-pohl
nessus
NVD
Published: 2002-08-12
Updated: 2024-11-20

Summary

Buffer overflows in fpexec in mod_frontpage before 1.6.1 may allow attackers to gain root privileges.

Vulnerable Configurations

Part Description Count
Application
Christof_Pohl
4

Nessus

  • NASL familyMandriva Local Security Checks
    NASL idMANDRAKE_MDKSA-2002-021.NASL
    descriptionA problem was found in versions of improved mod_frontpage prior to 1.6.1 regarding a lack of boundary checks in fpexec.c. This means that the suid root binary is exploitable for buffer overflows. This could be exploited by remote attackers to execute arbitrary code on the server with superuser privileges. Although there are no known exploits available, if you use mod_frontpage you are strongly encouraged to upgrade. This update for Mandrake Linux has been completely reworked and is easier to configure and use, as well as supporting the new FrontPage 2002 extensions.
    last seen2020-06-01
    modified2020-06-02
    plugin id13929
    published2004-07-31
    reporterThis script is Copyright (C) 2004-2019 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/13929
    titleMandrake Linux Security Advisory : mod_frontpage (MDKSA-2002:021)
  • NASL familyWeb Servers
    NASL idMOD_FRONTPAGE.NASL
    descriptionThe remote host is using the Apache mod_frontpage module. mod_frontpage older than 1.6.1 is vulnerable to a buffer overflow that could allow an attacker to gain root access. *** Since Nessus was not able to remotely determine the version *** of mod_frontage you are running, you are advised to manually *** check which version you are running as this might be a false *** positive. If you want the remote server to be remotely secure, we advise you do not use this module at all.
    last seen2020-06-01
    modified2020-06-02
    plugin id11303
    published2003-03-02
    reporterThis script is Copyright (C) 2003-2018 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/11303
    titlemod_frontpage for Apache fpexec Remote Overflow

References