CVE-2004-0492
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
15Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 34%
Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via a negative Content-Length HTTP header field, which causes a large amount of data to be copied.
Produtos afetados
n/a · n/aReferências
ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.aschttp://marc.info/?l=bugtraq&m=108711172710140&w=2http://marc.info/?l=bugtraq&m=130497311408250&w=2http://rhn.redhat.com/errata/RHSA-2004-245.htmlhttps://bugzilla.fedora.us/show_bug.cgi?id=1737http://seclists.org/lists/fulldisclosure/2004/Jun/0296.htmlhttp://secunia.com/advisories/11841https://exchange.xforce.ibmcloud.com/vulnerabilities/16387https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r734a07156abf332d5ab27fb91d9d962cacfef4f3681e44056f064fa8%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E