10

CVE-2004-0492

Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via a negative Content-Length HTTP header field, which causes a large amount of data to be copied.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apache ≫ HTTP Server Version1.3.26
Apache ≫ HTTP Server Version1.3.27
Apache ≫ HTTP Server Version1.3.28
Apache ≫ HTTP Server Version1.3.29
Apache ≫ HTTP Server Version1.3.31
Hp ≫ Virtualvault Version11.0.4
Hp ≫ Webproxy Version2.0
Hp ≫ Webproxy Version2.1
Ibm ≫ HTTP Server Version1.3.26
Ibm ≫ HTTP Server Version1.3.26.1
Ibm ≫ HTTP Server Version1.3.26.2
Ibm ≫ HTTP Server Version1.3.28
Sgi ≫ Propack Version2.4
Hp ≫ Vvos Version11.04
Openbsd ≫ Openbsd Version3.4
Openbsd ≫ Openbsd Version3.5
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 21.04% 0.955
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C