VULHUB ™

mod_bf is an Apache module which allows execution of scripts written in the brainf*ck programming language. Brainf*ck is a language consisting of only eight commands. Noteably, it contains the ability to move through a byte array of memory, and display or modify values in this array. The mod_bf interpreter does not impose boundary checking on the array allocated for the brainf*ck script. As a result, maliciously constructed scripts may overflow the allocated space, and read or modify arbitrary locations in memory. It may be possible to execute arbitrary code as the Apache process (generally user 'nobody').

mod_bf is an Apache module which allows execution of scripts written in the brainf*ck programming language. Brainf*ck is a language consisting of only eight commands. Noteably, it contains the ability to move through a byte array of memory, and display or modify values in this array. The mod_bf interpreter does not impose boundary checking on the array allocated for the brainf*ck script. As a result, maliciously constructed scripts may overflow the allocated space, and read or modify arbitrary locations in memory. It may be possible to execute arbitrary code as the Apache process (generally user 'nobody').