Lucene search

K
ubuntucveUbuntu.comUB:CVE-2004-0492
HistoryAug 06, 2004 - 12:00 a.m.

CVE-2004-0492

2004-08-0600:00:00
ubuntu.com
ubuntu.com
11

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.012 Low

EPSS

Percentile

85.3%

Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25
to 1.3.31 allows remote attackers to cause a denial of service (process
crash) and possibly execute arbitrary code via a negative Content-Length
HTTP header field, which causes a large amount of data to be copied.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchapache< 1.3.34-2ubuntu0.1UNKNOWN
ubuntu6.10noarchapache< 1.3.34-4ubuntu1UNKNOWN
ubuntu7.04noarchapache< 1.3.34-4ubuntu1UNKNOWN

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.012 Low

EPSS

Percentile

85.3%