peter bassill · operator
$ cve CVE-2007-1359 JSON

CVE-2007-1359 EXPLOIT

6.8
MEDIUM · CVSS 2.0 · EPSS 6.6% (pctl 94)

Patch early

A public exploit exists.

Description

Interpretation conflict in ModSecurity (mod_security) 2.1.0 and earlier allows remote attackers to bypass request rules via application/x-www-form-urlencoded POST data that contains an ASCIIZ (0x00) byte, which mod_security treats as a terminator even though it is still processed as normal data by some HTTP parsers including PHP 5.2.0, and possibly parsers in Perl, and Python.

Scoring

CVSS6.8 (MEDIUM, v2.0)
VectorAV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS6.62% — more likely to be exploited than 94% of all CVEs
On CISA KEVno
Public exploityes
Published2007-03-08
Last modified2026-06-16

Affected (1)

VendorProduct
mod securitymod security

Public exploits

SourceTitleDate
exploit-dbmod_security 2.1.0 - ASCIIZ byte POST Rules Bypass2007-03-07

References

→ the Explorer  ·  watch your stack  ·  NVD