CVE-2004-0488
High
Description
Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN.
SeverityHigh
CVSS7.5
Exploit probability99. percentile37.7%
Product
Apache Http Server
PublishedJul 7, 2004
First seenJul 7, 2004
How to fix
Update
- apache http_server2.0.50 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apache http_server | 2.0.35 ≤ v < 2.0.50 | 2.0.50 |
| debian debian_linux | 3.0 | — |
| redhat enterprise_linux_server | 2.0 | — |
| redhat enterprise_linux_workstation | 2.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.