CVE-2004-0940 PUBLISHED CVSS 7.800000190734863 HIGH

Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as the apache user via SSI (XSSI) documents that trigger a length calculation error.

EPSS 3.68% · 87.8th percentile

Risk Scores

CVSS v3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
3.68%
87.8th percentile

Affected Products

VendorProductVersions
apachehttp_server1.3
hphp-ux11.00, 11.11, 11.20
openpkgopenpkg2.2, 2.0, 2.1
n/an/an/a
trustixsecure_linux1.5
slackwareslackware_linux8.1, 9.0, 9.1
susesuse_linux8.1, 8.2, 9.0

Timeline

References

…and 10 more

Open in Interactive Console →