CVE-2004-0492 Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via a negat...
HighCVSS 10.0
EPSS 33.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via a negative Content-Length HTTP header field, which causes a large amount of data to be copied.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache HTTP Server | = 1.3.26 | No fix listed |
| Apache HTTP Server | = 1.3.27 | No fix listed |
| Apache HTTP Server | = 1.3.28 | No fix listed |
| Apache HTTP Server | = 1.3.29 | No fix listed |
| Apache HTTP Server | = 1.3.31 | No fix listed |
| HP Inc virtualvault | = 11.0.4 | No fix listed |
| HP Inc webproxy | = 2.0 | No fix listed |
| HP Inc webproxy | = 2.1 | No fix listed |
| ibm http server | = 1.3.26 | No fix listed |
| ibm http server | = 1.3.26.1 | No fix listed |
| ibm http server | = 1.3.26.2 | No fix listed |
| ibm http server | = 1.3.28 | No fix listed |
| sgi propack | = 2.4 | No fix listed |
| HP Inc vvos | = 11.04 | No fix listed |
| OpenBSD | All versions | No fix listed |
| OpenBSD | = 3.4 | No fix listed |
| OpenBSD | = 3.5 | No fix listed |
References
- 20040611 [OpenPKG-SA-2004.029] OpenPKG Security Advisory (apache) mailing-list
- SSRT090208 vendor-advisory
- RHSA-2004:245 patch vendor-advisory
- 20040610 Buffer overflow in apache mod_proxy,yet still apache much better than windows mailing-list
- 11841 third-party-advisory
- 101555 vendor-advisory
- 101841 vendor-advisory
- 57628 vendor-advisory
- DSA-525 patch vendor-advisory
- www.guninski.com
- VU#541310 third-party-advisory us-government-resource
- MDKSA-2004:065 vendor-advisory
- FLSA:1737 vendor-advisory
- apache-modproxy-contentlength-bo(16387) vdb-entry
- [httpd-cvs] 20210330 svn commit: r1073140 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html mailing-list
- [httpd-cvs] 20210330 svn commit: r1073149 [4/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/ mailing-list
- [httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/ mailing-list
- [httpd-cvs] 20210330 svn commit: r1888194 [3/13] - /httpd/site/trunk/content/security/json/ mailing-list
- [httpd-cvs] 20210330 svn commit: r1073139 [3/13] - in /websites/staging/httpd/trunk/content: ./ security/json/ mailing-list
- [httpd-cvs] 20210606 svn commit: r1075470 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html mailing-list
- [httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/ mailing-list
- oval:org.mitre.oval:def:100112 signature vdb-entry
- oval:org.mitre.oval:def:4863 signature vdb-entry