Apache HTTP Server contains a buffer overflow in the mod_proxy module

Overview

Apache Web Server contains a buffer overflow vulnerability in the mod_proxy module that may allow a remote attacker to execute arbitrary code or launch a denial of service (DoS) attack.

Description

The Apache Server is an open-source web server offered by The Apache Software Foundation. The Apache Server uses the mod_proxy module to implement proxying for various common protocols such as FTP and HTTP. In versions of Apache prior to and including 1.3.31-r2, the mod_proxy module contains a buffer overflow vulnerability located in the file proxy_util.c. To exploit this vulnerability an attacker must persuade an Apache server with mod_proxy enabled to connect to a malicious server configured to return an invalid content-length header.

---

Impact

A remote attacker may be able to execute arbitrary code with the privileges of an Apache child process. Exploitation of this vulnerability may completely disable the Apache

server resulting in a denial-of-service condition.

---

Solution

Upgrade Apache

Apache states this issue was fixed in Apache httpd 1.3.32-dev.

---

Vendor Information

541310

Filter by status: All Affected Not Affected Unknown

Filter by content: __ Additional information available

__ Sort by: Status Alphabetical

Expand all

Javascript is disabled. Click here to view vendors.

Apache Affected

Updated: August 20, 2004

Status

Affected

Vendor Statement

We have not received a statement from the vendor.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

The CERT/CC has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23541310 Feedback>).

CVSS Metrics

Group	Score	Vector
Base
Temporal
Environmental

References

• <http://www.guninski.com/modproxy1.html&gt;
• <http://secunia.com/advisories/11841/&gt;
• http://www-1.ibm.com/support/docview.wss?rs=177&context=SSEQTJ&uid=swg21173021

Acknowledgements

This vulnerability was reported by Georgi Guninski.

This document was written by Jeff Gennari.

Other Information

CVE IDs:	CVE-2004-0492
Severity Metric:	4.02 Date Public: