CVEvulnerability

CVE-2004-0940

7.8 HIGH Published 2005-02-09 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-02-09
Last modified
2026-06-16
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-131

Description

Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as the apache user via SSI (XSSI) documents that trigger a length calculation error.

Affected configurations

• apache http server (>= 1.3 <= 1.3.32) • openpkg openpkg 2.0 • openpkg openpkg 2.1 • openpkg openpkg 2.2 • hp hp-ux 11.00 • hp hp-ux 11.11 • hp hp-ux 11.20 • hp hp-ux 11.22 • slackware slackware linux 8.0 • slackware slackware linux 8.1 • slackware slackware linux 9.0 • slackware slackware linux 9.1 • slackware slackware linux 10.0 • slackware slackware linux current • suse suse linux 8.0 • suse suse linux 8.1 • suse suse linux 8.2 • suse suse linux 9.0 • suse suse linux 9.1 • suse suse linux 9.2 • trustix secure linux 1.5

Related

Weakness · CWE (1)

  • CWE-131 Incorrect Calculation of Buffer Size weakness

Referenced by CWE · observed example (2)

  • CWE-130 Improper Handling of Length Parameter Inconsistency weakness
  • CWE-131 Incorrect Calculation of Buffer Size weakness

References