Lucene search
Apache Team FoundationHTTPD:850FBD87B754C5094529CE7EC3955F88HistoryAug 04, 2003 - 12:00 a.m.
Apache Httpd < 2.0.48 : Local configuration regular expression overflow
2003-08-0400:00:00
Apache Team Foundation
httpd.apache.org
20
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
EPSS
0.001
Percentile
40.7%
By using a regular expression with more than 9 captures a buffer overflow can occur in mod_alias or mod_rewrite. To exploit this an attacker would need to be able to create a carefully crafted configuration file (.htaccess or httpd.conf)
Affected configurations
Node
apacheapache_httpdMatch2.0.47
ORapacheapache_httpdMatch2.0.46
ORapacheapache_httpdMatch2.0.45
ORapacheapache_httpdMatch2.0.44
ORapacheapache_httpdMatch2.0.43
ORapacheapache_httpdMatch2.0.42
ORapacheapache_httpdMatch2.0.40
ORapacheapache_httpdMatch2.0.39
ORapacheapache_httpdMatch2.0.37
ORapacheapache_httpdMatch2.0.36
ORapacheapache_httpdMatch2.0.35
Related
nessus
nessus
Fedora Core 1 : httpd-2.0.48-1.2 (2003-004)
2004-07-23 00:00:00
Apache < 1.3.29 Multiple Modules Local Overflow
2003-11-01 00:00:00
gentoo
gentoo
Apache: multiple buffer overflows
2003-10-28 00:00:00
Apache: buffer overflows and a possible information disclosure
2003-10-31 00:00:00
openvas
openvas
Slackware: Security Advisory (SSA:2003-308-01)
2012-09-10 00:00:00
Gentoo Security Advisory GLSA 200310-03 (Apache)
2008-09-24 00:00:00
Slackware Advisory SSA:2003-308-01 apache security update
2012-09-11 00:00:00
f5
f5
SOL3144 - Apache mod_alias buffer overflow vulnerability - CAN-2003-0542
2007-05-16 00:00:00
K3144 : Apache mod_alias buffer overflow vulnerability CAN-2003-0542
2013-03-28 00:00:00
slackware
slackware
apache security update
2003-11-04 16:48:11
httpd
httpd
Apache Httpd < 1.3.29 : Local configuration regular expression overflow
2003-08-04 00:00:00
redhat
redhat
(RHSA-2004:015) httpd security update
2004-01-13 00:00:00
(RHSA-2003:360) apache security update
2003-12-10 00:00:00
nvd
nvd
CVE-2003-0542
2003-11-03 05:00:00
cve
cve
CVE-2003-0542
2003-11-03 05:00:00
cvelist
cvelist
CVE-2003-0542
2003-10-30 05:00:00
debiancve
debiancve
CVE-2003-0542
2003-11-03 05:00:00
securityvulns
securityvulns
cert
cert
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
EPSS
0.001
Percentile
40.7%
Related for HTTPD:850FBD87B754C5094529CE7EC3955F88