NVD

Id
70928  
Name
CVE-2004-0492  
Description
Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via a negative Content-Length HTTP header field, which causes a large amount of data to be copied.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2004-08-06  
Modified Date
2017-07-10  
Seq
2004-0492  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
366008 70928 CVE-2004-0492 20040605-01-U  View
366009 70928 CVE-2004-0492 20040611 [OpenPKG-SA-2004.029] OpenPKG Security Advisory (apache)  View
366010 70928 CVE-2004-0492 HPSBOV02683  View
366011 70928 CVE-2004-0492 oval:org.mitre.oval:def:100112  View
366012 70928 CVE-2004-0492 oval:org.mitre.oval:def:4863  View
366013 70928 CVE-2004-0492 RHSA-2004:245  View
366014 70928 CVE-2004-0492 20040610 Buffer overflow in apache mod_proxy,yet still apache much better than windows  View
366015 70928 CVE-2004-0492 101555  View
366016 70928 CVE-2004-0492 101841  View
366017 70928 CVE-2004-0492 57628  View
366018 70928 CVE-2004-0492 DSA-525  View
366019 70928 CVE-2004-0492 http://www.guninski.com/modproxy1.html  View
366020 70928 CVE-2004-0492 VU#541310  View
366021 70928 CVE-2004-0492 MDKSA-2004:065  View
366022 70928 CVE-2004-0492 apache-modproxy-contentlength-bo(16387)  View
366023 70928 CVE-2004-0492 FLSA:1737  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62885 JVNDB-2004-000227 Apache HTTP Server の mod_proxy モジュールにおけるヒープオーバーフローの脆弱性 Apache HTTP Server に含まれている mod_proxy モジュールの proxy_util.c には、 Content-Length ヘッダに指定された値の妥当性が適切にチェックされない不備のため、絶対値の大きい負の値が指定された場合、ヒープオーバーフローを発生する脆弱性が存在します。 CVE-2004-0492 8919 CVE-2004-0492 70928 10 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000227.html 2004-06-10 2007-04-01 View