Contributed by grey on from the a patchy ape ecchi apt itchy dept.
httpd(8) 's mod_rewrite module can be made to write one zero byte in an arbitrary memory position outside of a char array, causing a DoS or possibly buffer overflows. This would require enabling dbm for mod_rewrite and making use of a malicious dbm file.
As always, you can also check http://www.openbsd.org/errata.html for this information.
(Comments are closed)