apache mod_include buffer overflow vulnerability

2004-10-2200:00:00

vuxml.freebsd.org

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

47.1%

JSON

There is a buffer overflow in a function used by mod_include
that may enable a local user to gain privileges of a httpd
child. Only users that are able to create SSI documents can
take advantage of that vulnerability.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchapache< 1.3.33UNKNOWN
FreeBSDanynoarchapache+mod_ssl< 1.3.32+2.8.21_1UNKNOWN
FreeBSDanynoarchapache+mod_ssl+ipv6< 1.3.32+2.8.21_1UNKNOWN
FreeBSDanynoarchapache+mod_perl<= 1.3.31UNKNOWN
FreeBSDanynoarchapache+ipv6< 1.3.33UNKNOWN
FreeBSDanynoarchapache+ssl<= 1.3.29.1.55UNKNOWN
FreeBSDanynoarchru-apache< 1.3.33+30.21UNKNOWN
FreeBSDanynoarchru-apache+mod_ssl< 1.3.33+30.21+2.8.22UNKNOWN

OS	Version	Architecture	Package	Version	Filename
FreeBSD	any	noarch	apache	< 1.3.33	UNKNOWN
FreeBSD	any	noarch	apache+mod_ssl	< 1.3.32+2.8.21_1	UNKNOWN
FreeBSD	any	noarch	apache+mod_ssl+ipv6	< 1.3.32+2.8.21_1	UNKNOWN
FreeBSD	any	noarch	apache+mod_perl	<= 1.3.31	UNKNOWN
FreeBSD	any	noarch	apache+ipv6	< 1.3.33	UNKNOWN
FreeBSD	any	noarch	apache+ssl	<= 1.3.29.1.55	UNKNOWN
FreeBSD	any	noarch	ru-apache	< 1.3.33+30.21	UNKNOWN
FreeBSD	any	noarch	ru-apache+mod_ssl	< 1.3.33+30.21+2.8.22	UNKNOWN