PT-2004-1826 · Apache · Apache+1

Published 2004-09-15 · Updated 2025-01-16 · CVE-2004-0747

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Apache versions 2.0.50 and earlier

Description A buffer overflow occurs during the expansion of environment variables in configuration file parsing, allowing a local user to gain the privileges of an httpd child by forcing the server to parse a carefully crafted .htaccess file. This issue was reported by the Swedish IT Incident Centre (SITIC).

Recommendations For Apache versions 2.0.50 and earlier, consider disabling the use of .htaccess files or restricting access to them until a fix is available. As a temporary workaround, limit the privileges of the httpd child process to minimize potential damage. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-131

Related Identifiers

CVE-2004-0747

RHSA-2004:463

Affected Products

Apache

Apache Http Server

References · 33

• https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E · Patch
• http://gentoo.org/security/en/glsa/glsa-200409-21.xml · Vendor Advisory
• https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E · Patch
• https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E · Patch
• http://trustix.org/errata/2004/0047 · Vendor Advisory
• https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E · Patch
• https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E · Patch
• https://security-tracker.debian.org/tracker/CVE-2004-0747 · Vendor Advisory
• https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E · Patch
• https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E · Patch
• http://mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:096 · Vendor Advisory
• https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E · Patch
• https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-0747 · Vendor Advisory
• http://novell.com/linux/security/advisories/2004_32_apache2.html · Vendor Advisory