CVE

Id
9368  
CVE No.
CVE-2004-0940  
Status
Candidate  
Description
Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as the apache user via SSI (XSSI) documents that trigger a length calculation error.  
Phase
Assigned (20041012)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
62395 9368 CVE-2004-0940 CONFIRM:http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm  View
62396 9368 CVE-2004-0940 DEBIAN:DSA-594  View
62397 9368 CVE-2004-0940 URL:http://www.debian.org/security/2004/dsa-594  View
62398 9368 CVE-2004-0940 MANDRAKE:MDKSA-2004:134  View
62399 9368 CVE-2004-0940 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2004:134  View
62400 9368 CVE-2004-0940 REDHAT:RHSA-2004:600  View
62401 9368 CVE-2004-0940 URL:http://www.redhat.com/support/errata/RHSA-2004-600.html  View
62402 9368 CVE-2004-0940 OPENPKG:OpenPKG-SA-2004.047  View
62403 9368 CVE-2004-0940 URL:http://marc.info/?l=bugtraq&m=109906660225051&w=2  View
62404 9368 CVE-2004-0940 CONFIRM:http://www.apacheweek.com/features/security-13  View
62405 9368 CVE-2004-0940 REDHAT:RHSA-2005:816  View
62406 9368 CVE-2004-0940 URL:http://www.redhat.com/support/errata/RHSA-2005-816.html  View
62407 9368 CVE-2004-0940 SUNALERT:102197  View
62408 9368 CVE-2004-0940 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-26-102197-1  View
62409 9368 CVE-2004-0940 BID:11471  View
62410 9368 CVE-2004-0940 URL:http://www.securityfocus.com/bid/11471  View
62411 9368 CVE-2004-0940 VUPEN:ADV-2006-0789  View
62412 9368 CVE-2004-0940 URL:http://www.vupen.com/english/advisories/2006/0789  View
62413 9368 CVE-2004-0940 SECTRACK:1011783  View
62414 9368 CVE-2004-0940 URL:http://securitytracker.com/id?1011783  View
62415 9368 CVE-2004-0940 SECUNIA:12898  View
62416 9368 CVE-2004-0940 URL:http://secunia.com/advisories/12898/  View
62417 9368 CVE-2004-0940 SECUNIA:19073  View
62418 9368 CVE-2004-0940 URL:http://secunia.com/advisories/19073  View
62419 9368 CVE-2004-0940 XF:apache-modinclude-bo(17785)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63144 JVNDB-2004-000486 GD Library の gdMalloc() 関数を呼び出す際の処理におけるバッファオーバーフローの脆弱性 GD Library には、gdMalloc() 関数を呼び出す際の処理で境界チェックが適切に行われていない不備のため、意図的に作成された画像ファイルを処理した場合にバッファオーバーフローが発生する脆弱性が存在します。 CVE-2004-0941 9368 10 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000486.html  View