Description

Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as the apache user via SSI (XSSI) documents that trigger a length calculation error.

Remediation

References

CVE-2004-0940

Related Vulnerabilities

GlassFish Improper Authentication Vulnerability (CVE-2017-1000030)

WebLogic CVE-2018-15756 Vulnerability (CVE-2018-15756)

MySQL CVE-2024-21069 Vulnerability (CVE-2024-21069)

MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2010-1150)

WordPress 'press-this.php' Remote Security Bypass Vulnerability (0.7 - 3.1.1)

Severity

High

Classification

CVE-2004-0940 CWE-131 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities