NetSight
IP …
medium5.0Public exploit code

CVE-2009-1902

The multipart processor in ModSecurity before 2.5.9 allows remote attackers to cause a denial of service (crash) via a multipart form datapost request with a m…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The multipart processor in ModSecurity before 2.5.9 allows remote attackers to cause a denial of service (crash) via a multipart form datapost request with a missing part header name, which triggers a NULL pointer dereference.

Affected products

VendorProductAffected versions
TrustwaveModsecurity
before 2.5.9
FedoraprojectFedora
Versions 9, 10

Weakness classification

CWE-476

References