Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2003-0542
HistoryNov 03, 2003 - 5:00 a.m.

CVE-2003-0542

2003-11-0305:00:00
CWE-119
mitre
web.nvd.nist.gov
167
cve-2003-0542
apache
buffer overflow
mod_alias
mod_rewrite
denial of service
arbitrary code execution
nvd

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

High

EPSS

0.001

Percentile

40.7%

JSON

Multiple stack-based buffer overflows in (1) mod_alias and (2) mod_rewrite for Apache before 1.3.29 allow attackers to create configuration files to cause a denial of service (crash) or execute arbitrary code via a regular expression with more than 9 captures.

Affected configurations

Nvd
Node
apachehttp_serverMatch1.3
OR
apachehttp_serverMatch1.3.1
OR
apachehttp_serverMatch1.3.3
OR
apachehttp_serverMatch1.3.4
OR
apachehttp_serverMatch1.3.6
OR
apachehttp_serverMatch1.3.9
OR
apachehttp_serverMatch1.3.11
OR
apachehttp_serverMatch1.3.12
OR
apachehttp_serverMatch1.3.14
OR
apachehttp_serverMatch1.3.17
OR
apachehttp_serverMatch1.3.18
OR
apachehttp_serverMatch1.3.19
OR
apachehttp_serverMatch1.3.20
OR
apachehttp_serverMatch1.3.22
OR
apachehttp_serverMatch1.3.23
OR
apachehttp_serverMatch1.3.24
OR
apachehttp_serverMatch1.3.25
OR
apachehttp_serverMatch1.3.26
OR
apachehttp_serverMatch1.3.27
OR
apachehttp_serverMatch1.3.28
OR
apachehttp_serverMatch2.0
OR
apachehttp_serverMatch2.0.28
OR
apachehttp_serverMatch2.0.32
OR
apachehttp_serverMatch2.0.35
OR
apachehttp_serverMatch2.0.36
OR
apachehttp_serverMatch2.0.37
OR
apachehttp_serverMatch2.0.38
OR
apachehttp_serverMatch2.0.39
OR
apachehttp_serverMatch2.0.40
OR
apachehttp_serverMatch2.0.41
OR
apachehttp_serverMatch2.0.42
OR
apachehttp_serverMatch2.0.43
OR
apachehttp_serverMatch2.0.44
OR
apachehttp_serverMatch2.0.45
OR
apachehttp_serverMatch2.0.46
OR
apachehttp_serverMatch2.0.47
VendorProductVersionCPE
apachehttp_server1.3.9cpe:/a:apache:http_server:1.3.9:::
apachehttp_server1.3.20cpe:/a:apache:http_server:1.3.20:::
apachehttp_server2.0.40cpe:/a:apache:http_server:2.0.40:::
apachehttp_server1.3.1cpe:/a:apache:http_server:1.3.1:::
apachehttp_server1.3.28cpe:/a:apache:http_server:1.3.28:::
apachehttp_server1.3.24cpe:/a:apache:http_server:1.3.24:::
apachehttp_server1.3cpe:/a:apache:http_server:1.3:::
apachehttp_server2.0.42cpe:/a:apache:http_server:2.0.42:::
apachehttp_server1.3.17cpe:/a:apache:http_server:1.3.17:::
apachehttp_server1.3.12cpe:/a:apache:http_server:1.3.12:::
Rows per page:
1-10 of 361

References

Related

openvas 8
f5 2
slackware 1
httpd 2
nessus 13
redhat 2
gentoo 2
nvd 1
cvelist 1
debiancve 1
securityvulns 2
cert 2
openvas
openvas
Gentoo Security Advisory GLSA 200310-03 (Apache)
2008-09-24 00:00:00
Slackware Advisory SSA:2003-308-01 apache security update
2012-09-11 00:00:00
Slackware: Security Advisory (SSA:2003-308-01)
2012-09-10 00:00:00
f5
f5
SOL3144 - Apache mod_alias buffer overflow vulnerability - CAN-2003-0542
2007-05-16 00:00:00
K3144 : Apache mod_alias buffer overflow vulnerability CAN-2003-0542
2013-03-28 00:00:00
slackware
slackware
apache security update
2003-11-04 16:48:11
httpd
httpd
Apache Httpd < 2.0.48 : Local configuration regular expression overflow
2003-08-04 00:00:00
Apache Httpd < 1.3.29 : Local configuration regular expression overflow
2003-08-04 00:00:00
nessus
nessus
Apache < 1.3.29 Multiple Modules Local Overflow
2003-11-01 00:00:00
Slackware 8.1 / 9.0 / 9.1 / current : apache security update (SSA:2003-308-01)
2005-07-13 00:00:00
Fedora Core 1 : httpd-2.0.48-1.2 (2003-004)
2004-07-23 00:00:00
redhat
redhat
(RHSA-2004:015) httpd security update
2004-01-13 00:00:00
(RHSA-2003:360) apache security update
2003-12-10 00:00:00
gentoo
gentoo
Apache: multiple buffer overflows
2003-10-28 00:00:00
Apache: buffer overflows and a possible information disclosure
2003-10-31 00:00:00
nvd
nvd
CVE-2003-0542
2003-11-03 05:00:00
cvelist
cvelist
CVE-2003-0542
2003-10-30 05:00:00
debiancve
debiancve
CVE-2003-0542
2003-11-03 05:00:00
securityvulns
securityvulns
NetSec Security Advisory: Multiple Vulnerabilities Resulting From Use Of Apple OSX HFS+
2005-02-17 00:00:00
[RHSA-2003:320-01] Updated httpd packages fix Apache security vulnerabilities
2003-12-17 00:00:00
cert
cert
Apache mod_alias vulnerable to buffer overflow via crafted regular expression
2004-02-03 00:00:00
Apache mod_rewrite vulnerable to buffer overflow via crafted regular expression
2004-02-03 00:00:00

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

High

EPSS

0.001

Percentile

40.7%

JSON
Related for CVE-2003-0542
openvas8f52slackware1httpd2nessus13redhat2gentoo2nvd1cvelist1debiancve1securityvulns2cert2