Apache 1.3 IP address access control failure on some 64-bit platforms

2004-03-0700:00:00

vuxml.freebsd.org

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

71.4%

JSON

Henning Brauer discovered a programming error in Apache
1.3’s mod_access that results in the netmasks in IP address
access control rules being interpreted incorrectly on
64-bit, big-endian platforms. In some cases, this could
cause a `deny from’ IP address access control rule including
a netmask to fail.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchapache< 1.3.29_2UNKNOWN
FreeBSDanynoarchapache+mod_ssl< 1.3.29+2.8.16_1UNKNOWN
FreeBSDanynoarchapache+ssl< 1.3.29.1.53_1UNKNOWN
FreeBSDanynoarchru-apache< 1.3.29+30.19_1UNKNOWN
FreeBSDanynoarchru-apache+mod_ssl< 1.3.29+30.19+2.8.16_1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
FreeBSD	any	noarch	apache	< 1.3.29_2	UNKNOWN
FreeBSD	any	noarch	apache+mod_ssl	< 1.3.29+2.8.16_1	UNKNOWN
FreeBSD	any	noarch	apache+ssl	< 1.3.29.1.53_1	UNKNOWN
FreeBSD	any	noarch	ru-apache	< 1.3.29+30.19_1	UNKNOWN
FreeBSD	any	noarch	ru-apache+mod_ssl	< 1.3.29+30.19+2.8.16_1	UNKNOWN