A flaw was found in the mod_fcgid module of httpd. A malformed FastCGI response may result in a stack-based buffer overflow in the modules/fcgid/fcgid_bucket.c file in the fcgid_header_bucket_read() function, resulting in an application crash.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mod_fcgid | Apache | * | 2.3.5 (including) |
| Mod_fcgid | Apache | 2.3.1 (including) | 2.3.1 (including) |
| Mod_fcgid | Apache | 2.3.2 (including) | 2.3.2 (including) |
| Mod_fcgid | Apache | 2.3.3 (including) | 2.3.3 (including) |
| Mod_fcgid | Apache | 2.3.4 (including) | 2.3.4 (including) |
| Libapache2-mod-fcgid | Ubuntu | dapper | * |
| Libapache2-mod-fcgid | Ubuntu | hardy | * |
| Libapache2-mod-fcgid | Ubuntu | karmic | * |
| Libapache2-mod-fcgid | Ubuntu | lucid | * |
| Libapache2-mod-fcgid | Ubuntu | maverick | * |
| Libapache2-mod-fcgid | Ubuntu | upstream | * |