NVD

Id
71342  
Name
CVE-2004-0940  
Description
Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as the apache user via SSI (XSSI) documents that trigger a length calculation error.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2005-02-09  
Modified Date
2017-07-10  
Seq
2004-0940  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
368775 71342 CVE-2004-0940 OpenPKG-SA-2004.047  View
368776 71342 CVE-2004-0940 1011783  View
368777 71342 CVE-2004-0940 102197  View
368778 71342 CVE-2004-0940 http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm  View
368779 71342 CVE-2004-0940 http://www.apacheweek.com/features/security-13  View
368780 71342 CVE-2004-0940 DSA-594  View
368781 71342 CVE-2004-0940 MDKSA-2004:134  View
368782 71342 CVE-2004-0940 RHSA-2004:600  View
368783 71342 CVE-2004-0940 RHSA-2005:816  View
368784 71342 CVE-2004-0940 11471  View
368785 71342 CVE-2004-0940 ADV-2006-0789  View
368786 71342 CVE-2004-0940 apache-modinclude-bo(17785)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63111 JVNDB-2004-000453 Apache HTTP Server の mod_include モジュールにおけるバッファオーバーフローの脆弱性 Apache HTTP Server に含まれている mod_include モジュールには、handle_echo() 関数等から呼び出される get_tag() 関数内でバッファの終端チェックの不備のためバッファオーバーフローが発生する脆弱性が存在します。 CVE-2004-0940 9367 CVE-2004-0940 71342 6.9 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000453.html 2004-10-19 2007-04-01 View