CVE-2007-1359
Interpretation conflict in ModSecurity (mod_security) 2.1.0 and earlier allows remote attackers...
Interpretation conflict in ModSecurity (mod_security) 2.1.0 and earlier allows remote attackers to bypass request rules via application/x-www-form-urlencoded POST data that contains an ASCIIZ (0x00) byte, which mod_security treats as a terminator even though it is still processed as normal data by some HTTP parsers including PHP 5.2.0, and possibly parsers in Perl, and Python.
Exploit likelihood
What each source reports
NVD Score used
Interpretation conflict in ModSecurity (mod_security) 2.1.0 and earlier allows remote attackers to bypass request rules via application/x-www-form-urlencoded POST data that contains an ASCIIZ (0x00) byte, which mod_security treats as a terminator even though it is still processed as normal data by some HTTP parsers including PHP 5.2.0, and possibly parsers in Perl, and Python.
- Record
CVE-2007-1359- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Interpretation conflict in ModSecurity (mod_security) 2.1.0 and earlier allows remote attackers to bypass request rules via application/x-www-form-urlencoded POST data that contains an ASCIIZ (0x00) byte, which mod_security treats as a terminator even though it is still processed as normal data by some HTTP parsers including PHP 5.2.0, and possibly parsers in Perl, and Python.
- Record
CVE-2007-1359- Updated
- 2026-11-02
EUVDEUVD-2007-1355 No score
Interpretation conflict in ModSecurity (mod_security) 2.1.0 and earlier allows remote attackers to bypass request rules via application/x-www-form-urlencoded POST data that contains an ASCIIZ (0x00) byte, which mod_security treats as a terminator even though it is still processed as normal data by some HTTP parsers including PHP 5.2.0, and possibly parsers in Perl, and Python.
- Record
EUVD-2007-1355- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-j86f-xc6j-vf9f No score
Interpretation conflict in ModSecurity (mod_security) 2.1.0 and earlier allows remote attackers...
Interpretation conflict in ModSecurity (mod_security) 2.1.0 and earlier allows remote attackers to bypass request rules via application/x-www-form-urlencoded POST data that contains an ASCIIZ (0x00) byte, which mod_security treats as a terminator even though it is still processed as normal data by some HTTP parsers including PHP 5.2.0, and possibly parsers in Perl, and Python.
- Record
GHSA-j86f-xc6j-vf9f- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | mod_security 2.1.0 - ASCIIZ byte POST Rules Bypass | 2007-03-07 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-1359 is a medium vulnerability (CVSS 6.8) in Mod Security Security, published March 8, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 6.83%, the 94th percentile. No source names a fixed version.
References
oracle.com/technetwork/topics/security/cpujul2008-090335.html
vupen.com/english/advisories/2008/2115
exchange.xforce.ibmcloud.com/vulnerabilities/32872
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143
php-security.org/MOPB/BONUS-12-2007.html
Show 11 moreShow less
modsecurity.org/blog/archives/2007/03/modsecurity_asc.html
secunia.com/advisories/25316
gentoo.org/security/en/glsa/glsa-200705-17.xml
securityfocus.com/bid/22831
osvdb.org/32778
nvd.nist.gov/vuln/detail/CVE-2007-1359
github.com/advisories/GHSA-j86f-xc6j-vf9f