Date: Fri, 22 Mar 2013 10:08:40 -0500 From: John Lightsey <jd@...nel.net> To: oss-security@...ts.openwall.com Subject: CVE request: mod_ruid2 before 0.9.8 Hello, mod_ruid2 is a suexec style module for apache 2.0, 2.2 and 2.4, based on mod_ruid and mod_suid2 that allows the Apache webserver to run under the UID and GID of the user account that controls a virtualhost. It also includes functionality to chroot Apache into the virtualhost document root prior to processing HTTP requests. After processing each request, mod_ruid2 returns to its initial starting state. For uid/gid changes this is done using linux capabilities. For chroot, this is done by following a file descriptor that leads outside of the chroot. In versions of mod_ruid2 before 0.9.8, the filedescriptor used to break out of the chroot is inherited by all Apache subprocesses. This allows CGI scripts to also to break out of the chroot by performing a fchdir() across the inherited file descriptor. http://sourceforge.net/mailarchive/forum.php?thread_name=514C503E.4020109%40users.sourceforge.net&forum_name=mod-ruid-announce Download attachment "signature.asc" of type "application/pgp-signature" (901 bytes)
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.