apache mod_include buffer overflow vulnerability

2004-10-2200:00:00

vuxml.freebsd.org

0.001 Low

EPSS

Percentile

46.6%

JSON

There is a buffer overflow in a function used by mod_include
that may enable a local user to gain privileges of a httpd
child. Only users that are able to create SSI documents can
take advantage of that vulnerability.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchapache< 1.3.33UNKNOWN
FreeBSDanynoarchapache+mod_ssl< 1.3.32+2.8.21_1UNKNOWN
FreeBSDanynoarchapache+mod_ssl+ipv6< 1.3.32+2.8.21_1UNKNOWN
FreeBSDanynoarchapache+mod_perl<= 1.3.31UNKNOWN
FreeBSDanynoarchapache+ipv6< 1.3.33UNKNOWN
FreeBSDanynoarchapache+ssl<= 1.3.29.1.55UNKNOWN
FreeBSDanynoarchru-apache< 1.3.33+30.21UNKNOWN
FreeBSDanynoarchru-apache+mod_ssl< 1.3.33+30.21+2.8.22UNKNOWN

OS	Version	Architecture	Package	Version	Filename
FreeBSD	any	noarch	apache	< 1.3.33	UNKNOWN
FreeBSD	any	noarch	apache+mod_ssl	< 1.3.32+2.8.21_1	UNKNOWN
FreeBSD	any	noarch	apache+mod_ssl+ipv6	< 1.3.32+2.8.21_1	UNKNOWN
FreeBSD	any	noarch	apache+mod_perl	<= 1.3.31	UNKNOWN
FreeBSD	any	noarch	apache+ipv6	< 1.3.33	UNKNOWN
FreeBSD	any	noarch	apache+ssl	<= 1.3.29.1.55	UNKNOWN
FreeBSD	any	noarch	ru-apache	< 1.3.33+30.21	UNKNOWN
FreeBSD	any	noarch	ru-apache+mod_ssl	< 1.3.33+30.21+2.8.22	UNKNOWN