John Sterling mod_cplusplus is a framework for creating Apache modules in C++. This is designed to function in a similar fashion as mod_perl. It is reported that mod_cplusplus contains a buffer overflow vulnerability. This may allow attacker-supplied data to overwrite a fixed size memory buffer, corrupting adjacent memory regions. This may allow for denial of service conditions, or possible remote code execution. Versions prior to 1.4.1 are reported susceptible to this vulnerability.
John Sterling mod_cplusplus is a framework for creating Apache modules in C++. This is designed to function in a similar fashion as mod_perl. It is reported that mod_cplusplus contains a buffer overflow vulnerability. This may allow attacker-supplied data to overwrite a fixed size memory buffer, corrupting adjacent memory regions. This may allow for denial of service conditions, or possible remote code execution. Versions prior to 1.4.1 are reported susceptible to this vulnerability.