PT-2004-1606 · Apache · Apache Mod Ssl+1

Published 2004-05-17 · Updated 2022-09-23 · CVE-2004-0488

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apache mod ssl (affected versions not specified)

Description The issue is related to a stack-based buffer overflow in the ssl util uuencode binary function. This occurs when mod ssl is configured to trust the issuing CA and a client certificate with a long subject DN is presented. The buffer overflow could allow remote attackers to execute arbitrary code. A similar issue is described as a buffer overflow in the mod ssl FakeBasicAuth code, which could be exploited by an attacker using a trusted client certificate with a subject DN field exceeding 6K in length.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2004-0488

DSA-532

RHSA-2004:342

RHSA-2008:0523

Affected Products

Apache Http Server

Apache Mod Ssl

References · 37

• https://security-tracker.debian.org/tracker/CVE-2004-0488 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2004-245.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2004-0488 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=109181600614477&w=2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0488 · Security Note
• http://debian.org/security/2004/dsa-532 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2005-816.html · Vendor Advisory
• http://marc.info/?l=bugtraq&m=109215056218824&w=2 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2004:055 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2004:054 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2004-342.html · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200406-05.xml · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2004-405.html · Vendor Advisory
• ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc · Vendor Advisory
• http://trustix.net/errata/2004/0031 · Vendor Advisory