CVEvulnerability

CVE-2003-0542

7.2 HIGH Published 2003-11-03 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2003-11-03
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119

Description

Multiple stack-based buffer overflows in (1) mod_alias and (2) mod_rewrite for Apache before 1.3.29 allow attackers to create configuration files to cause a denial of service (crash) or execute arbitrary code via a regular expression with more than 9 captures.

Affected configurations

• apache http server 1.3 • apache http server 1.3.1 • apache http server 1.3.3 • apache http server 1.3.4 • apache http server 1.3.6 • apache http server 1.3.9 • apache http server 1.3.11 • apache http server 1.3.12 • apache http server 1.3.14 • apache http server 1.3.17 • apache http server 1.3.18 • apache http server 1.3.19 • apache http server 1.3.20 • apache http server 1.3.22 • apache http server 1.3.23 • apache http server 1.3.24 • apache http server 1.3.25 • apache http server 1.3.26 • apache http server 1.3.27 • apache http server 1.3.28 • apache http server 2.0 • apache http server 2.0.28 • apache http server 2.0.32 • apache http server 2.0.35 • apache http server 2.0.36 • apache http server 2.0.37 • apache http server 2.0.38 • apache http server 2.0.39 • apache http server 2.0.40 • apache http server 2.0.41 • apache http server 2.0.42 • apache http server 2.0.43 • apache http server 2.0.44 • apache http server 2.0.45 • apache http server 2.0.46 • apache http server 2.0.47

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

Referenced by CWE · observed example (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References