Lucene search
HistoryMar 10, 2005 - 5:00 a.m.
CVE-2004-1765
modsecurity
buffer overflow
apache
cve-2004-1765
security vulnerability
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.1 High
AI Score
Confidence
High
0.106 Low
EPSS
Percentile
95.1%
Off-by-one buffer overflow in ModSecurity (mod_security) 1.7.4 for Apache 2.x, when SecFilterScanPost is enabled, allows remote attackers to execute arbitrary code via crafted POST requests.
Affected configurations
Node
mod_securitymod_securityMatch1.7.4
| CPE | Name | Operator | Version |
|---|---|---|---|
| mod_security:mod_security | mod security | eq | 1.7.4 |
Related
nessus
nessus
cvelist
cvelist
CVE-2004-1765
2005-03-10 05:00:00
openvas
openvas
FreeBSD Ports: mod_security
2008-09-04 00:00:00
FreeBSD Ports: mod_security
2008-09-04 00:00:00
nvd
nvd
CVE-2004-1765
2004-12-31 05:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.1 High
AI Score
Confidence
High
0.106 Low
EPSS
Percentile
95.1%
Related for CVE-2004-1765