CVEvulnerability

CVE-2004-0492

10.0 HIGH Published 2004-08-06 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2004-08-06
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via a negative Content-Length HTTP header field, which causes a large amount of data to be copied.

Affected configurations

• apache http server 1.3.26 • apache http server 1.3.27 • apache http server 1.3.28 • apache http server 1.3.29 • apache http server 1.3.31 • hp virtualvault 11.0.4 • hp webproxy 2.0 • hp webproxy 2.1 • ibm http server 1.3.26 • ibm http server 1.3.26.1 • ibm http server 1.3.26.2 • ibm http server 1.3.28 • sgi propack 2.4 • hp vvos 11.04 • openbsd openbsd • openbsd openbsd 3.4 • openbsd openbsd 3.5

Related

Referenced by CWE · observed example (1)

  • CWE-130 Improper Handling of Length Parameter Inconsistency weakness

References