Evgeny Legerov has discovered a vulnerability in mod_security, which can be exploited by malicious people to cause a DoS (Denial-of-Service) and potentially compromise a vulnerable system.

The vulnerability is reportedly caused due to an off-by-one error within the handling of POST payloads when the "SecFilterScanPost" directive is enabled.

Successful exploitation will cause web server instances to crash but may potentially also allow execution of arbitrary code. However, this hasn't been confirmed.

The vulnerability has been reported in version 1.7.4 combined with the Apache 2.x branch.

Solution
Update to version 1.7.5.
Further details available to Secunia VIM customers

Provided and/or discovered by
Evgeny Legerov, S-Quadra.

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://www.s-quadra.com/advisories/Adv-20040315.txt

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers