CVE-2003-0843

CVE-2003-0843 concerns a format-string vulnerability in mod_gzip_printf within mod_gzip (v1.3.26.1a and earlier, possibly later builds) when running in debug mode and handling HTTP requests with Accept-Encoding: gzip. A remote attacker can cause arbitrary code execution by supplying format-string...

CVE-2003-0842

CVE-2003-0842 describes a stack-based buffer overflow in mod_gzip_printf for mod_gzip 1.3.26.1a and earlier (and possibly later official versions) when running in debug mode. An attacker can trigger arbitrary code execution remotely by sending a GET request with a long filename and an Accept-Enco...