Description

Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via a negative Content-Length HTTP header field, which causes a large amount of data to be copied.

Remediation

References

CVE-2004-0492

Related Vulnerabilities

WebLogic CVE-2018-2935 Vulnerability (CVE-2018-2935)

Jboss EAP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-3873)

WordPress Plugin Scroll Baner Cross-Site Request Forgery (1.0)

WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery Cross-Site Scripting (1.2.12)

WordPress Plugin Import all XML, CSV & TXT into WordPress Multiple Vulnerabilities (6.5.7)

Severity

Critical

Classification

CVE-2004-0492

Tags

Missing Update Known Vulnerabilities