Lucene search
HistoryNov 17, 2003 - 5:00 a.m.
CVE-2003-0842
cve-2003-0842
mod_gzip
buffer overflow
remote code execution
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.6 High
AI Score
Confidence
Low
0.013 Low
EPSS
Percentile
85.8%
Stack-based buffer overflow in mod_gzip_printf for mod_gzip 1.3.26.1a and earlier, and possibly later official versions, when running in debug mode, allows remote attackers to execute arbitrary code via a long filename in a GET request with an “Accept-Encoding: gzip” header.
Affected configurations
Node
dag_apt_repositorymod_gzipMatch1.3.26.1a
| CPE | Name | Operator | Version |
|---|---|---|---|
| dag_apt_repository:mod_gzip | dag apt repository mod gzip | eq | 1.3.26.1a |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.6 High
AI Score
Confidence
Low
0.013 Low
EPSS
Percentile
85.8%
Related for CVE-2003-0842