Lucene search

[email protected]CVE-2004-0492

HistoryAug 06, 2004 - 4:00 a.m.

CVE-2004-0492

2004-08-0604:00:00

[email protected]

web.nvd.nist.gov

290

apache

mod_proxy

buffer overflow

cve-2004-0492

denial of service

remote code execution

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8.1 High

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.5%

JSON

Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via a negative Content-Length HTTP header field, which causes a large amount of data to be copied.

Affected configurations

NVD

Node

apachehttp_serverMatch1.3.26

apachehttp_serverMatch1.3.27

apachehttp_serverMatch1.3.28

apachehttp_serverMatch1.3.29

apachehttp_serverMatch1.3.31

hpvirtualvaultMatch11.0.4

hpwebproxyMatch2.0

hpwebproxyMatch2.1

ibmhttp_serverMatch1.3.26

ibmhttp_serverMatch1.3.26.1

ibmhttp_serverMatch1.3.26.2

ibmhttp_serverMatch1.3.28

sgipropackMatch2.4

Node

hpvvosMatch11.04

openbsdopenbsd

openbsdopenbsdMatch3.4

openbsdopenbsdMatch3.5

CPENameOperatorVersion
apache:http_serverapache http servereq1.3.26
apache:http_serverapache http servereq1.3.27
apache:http_serverapache http servereq1.3.28
apache:http_serverapache http servereq1.3.29
apache:http_serverapache http servereq1.3.31
hp:virtualvaulthp virtualvaulteq11.0.4
hp:webproxyhp webproxyeq2.0
hp:webproxyhp webproxyeq2.1
ibm:http_serveribm http servereq1.3.26
ibm:http_serveribm http servereq1.3.26.1

CPE	Name	Operator	Version
apache:http_server	apache http server	eq	1.3.26
apache:http_server	apache http server	eq	1.3.27
apache:http_server	apache http server	eq	1.3.28
apache:http_server	apache http server	eq	1.3.29
apache:http_server	apache http server	eq	1.3.31
hp:virtualvault	hp virtualvault	eq	11.0.4
hp:webproxy	hp webproxy	eq	2.0
hp:webproxy	hp webproxy	eq	2.1
ibm:http_server	ibm http server	eq	1.3.26
ibm:http_server	ibm http server	eq	1.3.26.1