BSD Ports

Vulnerable: version 2.9.6 is affected by 4 known vulnerabilities. See below.

www/mod_security 2.9.6 DragonFly

Intrusion detection and prevention engine

System
DragonFly
Repository
DPorts
Maintainer
[email protected] (as in FreeBSD)
License
APACHE20
Categories
security, www
Package size
255.9 KiB, 2406.7 KiB installed

Description

ModSecurity is an embeddable web application firewall. It provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring and real-time analysis with no changes to existing infrastructure.

It is also an open source project that aims to make the web application firewall technology available to everyone.

In the other systems

SystemPortVersion
DragonFlywww/mod_security2.9.6
FreeBSDwww/mod_security2.9.15
MidnightBSDwww/mod_security2.9.10_2
HardenedBSDwww/mod_security2.9.14
GhostBSDwww/mod_security2.9.14
OPNsensewww/mod_security2.9.13

Install

Binary package:

pkg install ap24-mod_security

From DPorts:

cd /usr/dports/www/mod_security && make install clean

Dependencies

Run dependencies 10

No port depends on this one.

Configuration

No options to configure.

Service scripts
none

Message after installing

You have installed ModSecurity.
To enable ModSecurity in Apache, follow the instructions in

 /usr/local/etc/apache24/modules.d/280_mod_security.conf

Most users will use the signatures from the OWASP Core Rule Set (CRS).
For configuration instructions, see /usr/local/share/doc/mod_security2/README.

Known vulnerabilities 4