CVE request: mod_ruid2 before 0.9.8

[John Lightsey <jd () cpanel net>]

Hello,

mod_ruid2 is a suexec style module for apache 2.0, 2.2 and 2.4, based on
mod_ruid and mod_suid2 that allows the Apache webserver to run under the
UID and GID of the user account that controls a virtualhost. It also
includes functionality to chroot Apache into the virtualhost document
root prior to processing HTTP requests.

After processing each request, mod_ruid2 returns to its initial starting
state. For uid/gid changes this is done using linux capabilities. For
chroot, this is done by following a file descriptor that leads outside
of the chroot.

In versions of mod_ruid2 before 0.9.8, the filedescriptor used to break
out of the chroot is inherited by all Apache subprocesses. This allows
CGI scripts to also to break out of the chroot by performing a fchdir()
across the inherited file descriptor.


http://sourceforge.net/mailarchive/forum.php?thread_name=514C503E.4020109%40users.sourceforge.net&forum_name=mod-ruid-announce

Attachment: signature.asc
Description: OpenPGP digital signature