Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2004-0492

Опубликовано: 06 авг. 2004
Источник: nvd
CVSS2: 10
EPSS Средний

Описание

Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via a negative Content-Length HTTP header field, which causes a large amount of data to be copied.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apache:http_server:1.3.26:*:*:*:*:*:*:*
cpe:2.3:a:apache:http_server:1.3.27:*:*:*:*:*:*:*
cpe:2.3:a:apache:http_server:1.3.28:*:*:*:*:*:*:*
cpe:2.3:a:apache:http_server:1.3.29:*:*:*:*:*:*:*
cpe:2.3:a:apache:http_server:1.3.31:*:*:*:*:*:*:*
cpe:2.3:a:hp:virtualvault:11.0.4:*:*:*:*:*:*:*
cpe:2.3:a:hp:webproxy:2.0:*:*:*:*:*:*:*
cpe:2.3:a:hp:webproxy:2.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:http_server:1.3.26:*:*:*:*:*:*:*
cpe:2.3:a:ibm:http_server:1.3.26.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:http_server:1.3.26.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:http_server:1.3.28:*:*:*:*:*:*:*
cpe:2.3:a:sgi:propack:2.4:*:*:*:*:*:*:*
Конфигурация 2

Одно из

cpe:2.3:o:hp:vvos:11.04:*:*:*:*:*:*:*
cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*
cpe:2.3:o:openbsd:openbsd:3.4:*:*:*:*:*:*:*
cpe:2.3:o:openbsd:openbsd:3.5:*:*:*:*:*:*:*

EPSS

Процентиль: 95%
0.21037
Средний

10 Critical

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

ubuntu
почти 21 год назад

Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via a negative Content-Length HTTP header field, which causes a large amount of data to be copied.

redhat
около 21 года назад

Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via a negative Content-Length HTTP header field, which causes a large amount of data to be copied.

debian
почти 21 год назад

Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3 ...

github
около 3 лет назад

Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via a negative Content-Length HTTP header field, which causes a large amount of data to be copied.

EPSS

Процентиль: 95%
0.21037
Средний

10 Critical

CVSS2

Дефекты

NVD-CWE-Other