CVE-2004-0492
NoneCVSS
—
EPSS
33.6%
Published
Aug 6, 2004
CISA due date
—
The record
Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via a negative Content-Length HTTP header field, which causes a large amount of data to be copied.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:3.0 | apache | 0 | 1.3.26-0woody5 |
Related vulnerabilities
- CVE-2005-2088 The Apache HTTP server before 1.3.34, and 2.0.x before 2.0.55, when acting as an HTTP… Also affects apache
- CVE-2002-0843 Buffer overflows in the ApacheBench benchmark support program (ab.c) in Apache before… Also affects apache
- CVE-2002-0840 Cross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before… Also affects apache