Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2004-0488
HistoryJul 07, 2004 - 4:00 a.m.

CVE-2004-0488

2004-07-0704:00:00
CWE-787
[email protected]
web.nvd.nist.gov

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.8 High

AI Score

Confidence

Low

0.575 Medium

EPSS

Percentile

97.7%

JSON

Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN.

Affected configurations

NVD
Node
apachehttp_serverRange2.0.35–2.0.50
Node
debiandebian_linuxMatch3.0
Node
redhatenterprise_linux_serverMatch2.0
OR
redhatenterprise_linux_workstationMatch2.0

References

Related

securityvulns 1
gentoo 1
openvas 10
ubuntucve 1
nessus 14
f5 2
slackware 1
httpd 1
debiancve 1
cve 1
cvelist 1
debian 2
osv 1
redhat 2
securityvulns
securityvulns
[OpenPKG-SA-2004.026] OpenPKG Security Advisory (apache)
2004-06-03 00:00:00
gentoo
gentoo
Apache: Buffer overflow in mod_ssl
2004-06-09 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200406-05 (Apache)
2008-09-24 00:00:00
Slackware: Security Advisory (SSA:2004-154-01)
2012-09-10 00:00:00
Gentoo Security Advisory GLSA 200406-05 (Apache)
2008-09-24 00:00:00
ubuntucve
ubuntucve
CVE-2004-0488
2004-07-07 00:00:00
nessus
nessus
mod_ssl ssl_util_uuencode_binary Remote Overflow
2004-05-29 00:00:00
Mandrake Linux Security Advisory : mod_ssl (MDKSA-2004:054)
2004-07-31 00:00:00
Slackware 8.1 / 9.0 / 9.1 / current : mod_ssl (SSA:2004-154-01)
2005-07-13 00:00:00
f5
f5
SOL3631 - Stack-based buffer overflow in Apache - CAN-2004-0488
2009-10-27 00:00:00
K3631 : Stack-based buffer overflow in Apache - CAN-2004-0488
2013-03-29 00:00:00
slackware
slackware
mod_ssl
2004-06-02 12:24:39
httpd
httpd
Apache Httpd < 2.0.50 : FakeBasicAuth overflow
2004-07-01 00:00:00
debiancve
debiancve
CVE-2004-0488
2004-07-07 04:00:00
cve
cve
CVE-2004-0488
2004-07-07 04:00:00
cvelist
cvelist
CVE-2004-0488
2004-05-28 04:00:00
debian
debian
[SECURITY] [DSA 532-1] New libapache-mod-ssl packages fix multiple vulnerabilities
2004-07-23 03:29:33
[SECURITY] [DSA 532-2] New libapache-mod-ssl packages fix multiple vulnerabilities
2004-07-27 16:41:32
osv
osv
libapache-mod-ssl - several vulnerabilities
2004-07-27 00:00:00
redhat
redhat
(RHSA-2004:245) apache, mod_ssl security update
2004-06-14 00:00:00
(RHSA-2004:342) httpd security update
2004-07-06 00:00:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.8 High

AI Score

Confidence

Low

0.575 Medium

EPSS

Percentile

97.7%

JSON
Related for NVD:CVE-2004-0488
securityvulns1gentoo1openvas10ubuntucve1nessus14f52slackware1httpd1debiancve1cve1cvelist1debian2osv1redhat2