CVE-2004-0488
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
15Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 38%
Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN.
Produtos afetados
n/a · n/aReferências
ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.aschttp://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021610.htmlhttp://marc.info/?l=bugtraq&m=108567431823750&w=2http://marc.info/?l=bugtraq&m=108619129727620&w=2http://marc.info/?l=bugtraq&m=109181600614477&w=2http://marc.info/?l=bugtraq&m=109215056218824&w=2http://rhn.redhat.com/errata/RHSA-2004-245.htmlhttps://bugzilla.fedora.us/show_bug.cgi?id=1888http://security.gentoo.org/glsa/glsa-200406-05.xmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/16214https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E