PT-2004-1780 · Apache · Apache+1

Virulent · Publicado 2004-07-21 · Atualizado 2017-07-11 · CVE-2004-0700

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apache mod ssl versions prior to 2.8.19 Apache versions prior to 1.3.31

Description A format string issue exists in the mod proxy hook functions within the ssl engine log.c file of mod ssl. This could potentially allow remote attackers to execute arbitrary messages by including format string specifiers in certain log messages for HTTPS, which are handled by the ssl log function.

Recommendations For Apache mod ssl versions prior to 2.8.19, update to version 2.8.19 or later. For Apache versions prior to 1.3.31, update to version 1.3.31 or later.

Correção

Identificadores relacionados

CVE-2004-0700

DSA-532

RHSA-2008:0523

Produtos afetados

Apache

Apache Mod Ssl

Referências · 16

• https://nvd.nist.gov/vuln/detail/CVE-2004-0700 · Nota de Segurança
• http://virulent.siyahsapka.org · Nota
• http://osvdb.org/7929 · Nota
• http://ubuntu.com/usn/usn-177-1 · Aviso do Fabricante
• http://debian.org/security/2004/dsa-532 · Aviso do Fabricante
• http://kb.cert.org/vuls/id/303448 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16705 · Nota
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000857 · Aviso do Fabricante
• http://marc.info/?l=apache-modssl&m=109001100906749&w=2 · Nota
• http://packetstormsecurity.org/0407-advisories/modsslFormat.txt · Nota
• http://marc.info/?l=bugtraq&m=109005001205991&w=2 · Nota
• http://securityfocus.com/bid/10736 · Nota
• http://redhat.com/support/errata/RHSA-2004-405.html · Aviso do Fabricante
• https://bugzilla.fedora.us/show_bug.cgi?id=1888 · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2004-408.html · Aviso do Fabricante