CVE-2007-1359
CVE-2007-1359 is a medium-severity vulnerability in Mod Security with a CVSS 2.0 base score of 6.8. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Medium (CVSS 2.0 base score 6.8)
- EPSS exploit prediction: 7% (93rd percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Mod Security
- Published:
- Last modified:
Description
Interpretation conflict in ModSecurity (mod_security) 2.1.0 and earlier allows remote attackers to bypass request rules via application/x-www-form-urlencoded POST data that contains an ASCIIZ (0x00) byte, which mod_security treats as a terminator even though it is still processed as normal data by some HTTP parsers including PHP 5.2.0, and possibly parsers in Perl, and Python.
Frequently asked questions
- What is CVE-2007-1359?
- Interpretation conflict in ModSecurity (mod_security) 2.1.0 and earlier allows remote attackers to bypass request rules via application/x-www-form-urlencoded POST data that contains an ASCIIZ (0x00) byte, which mod_security treats as a terminator even though it is still processed as normal data by some HTTP parsers including PHP 5.2.0, and possibly parsers in Perl, and Python.
- How severe is CVE-2007-1359?
- CVE-2007-1359 has a CVSS 2.0 base score of 6.8, rated medium severity.
- Is CVE-2007-1359 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 7% (93rd percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2007-1359?
- CVE-2007-1359 primarily affects Mod Security. In total, 7 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2007-1359?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2007-1359 published?
- CVE-2007-1359 was published on 2007-03-08 and last updated on 2026-06-16.
References
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143
- http://secunia.com/advisories/24373
- http://secunia.com/advisories/25316
- http://secunia.com/advisories/31087
- http://secunia.com/advisories/31113
- http://www.gentoo.org/security/en/glsa/glsa-200705-17.xml
- http://www.modsecurity.org/blog/archives/2007/03/modsecurity_asc.html
- http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html
- http://www.osvdb.org/32778
- http://www.php-security.org/MOPB/BONUS-12-2007.html
- http://www.securityfocus.com/bid/22831
- http://www.vupen.com/english/advisories/2007/0868
- http://www.vupen.com/english/advisories/2008/2109/references
- http://www.vupen.com/english/advisories/2008/2115
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32872
Affected products (7)
- cpe:2.3:a:mod_security:mod_security:1.7:*:*:*:*:*:*:*
- cpe:2.3:a:mod_security:mod_security:1.7.1:*:*:*:*:*:*:*
- cpe:2.3:a:mod_security:mod_security:1.7.2:*:*:*:*:*:*:*
- cpe:2.3:a:mod_security:mod_security:1.7.4:*:*:*:*:*:*:*
- cpe:2.3:a:mod_security:mod_security:1.7.5:*:*:*:*:*:*:*
- cpe:2.3:a:mod_security:mod_security:1.9.4:*:*:*:*:*:*:*
- cpe:2.3:a:mod_security:mod_security:2.1:*:*:*:*:*:*:*
More vulnerabilities in Mod Security
- CVE-2004-1765 — High (CVSS 7.5): Off-by-one buffer overflow in ModSecurity (mod_security) 1.7.4 for Apache 2.x, when SecFilterScanPost is enabled,…
- CVE-2003-1171 — High (CVSS 7.5): Heap-based buffer overflow in the sec_filter_out function in mod_security 1.7RC1 through 1.7.1 in Apache 2 allows…