Cenzic Detects an Apache Integer Overflow Vulnerability

As of February 5, 2010 Cenzic now detects an Apache 1.3 mod_proxy HTTP Chunked Encoding Integer Overflow Vulnerability (BugtraqID 37966).  An attacker can exploit the Apache remote integer overflow vulnerability and execute arbitrary code.  Successful exploits will compromise affected computers.  Failed exploit attempts will result in a denial-of-service condition.  Note that this issue affects platforms on which 'sizeof(int)' is less than 'sizeof(long)'.  In particular, this occurs on some 64-bit architectures.  Versions prior to Apache 1.3.42 are vulnerable.
                  
Background on Cenzic’s SmartAttacks
Every week, Cenzic’s suite of products is updated with the latest vulnerabilities (custom, commercial, and open-source) to better detect "holes" in Web applications.  These Web application vulnerabilities include (but not limited to) cross site scripting, buffer overflow, path or directory traversal, SQL injection, HTTP response splitting, and other workflow types.

by
Erin Swanson
Eswanson@cenzic.com