mod_throttle 3.0 allows local users with Apache privileges to access shared memory that points to a file that is writable by the apache user, which could allow local users to gain privileges.
Link | Tags |
---|---|
http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/012043.html | mailing list |
http://www.securityfocus.com/bid/8822 | vdb entry |