NetSight
high7.5

CVE-2004-0488

Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust the issuing CA, may …

Impact

Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN.

Affected products

VendorProductAffected versions
ApacheHttp Server
from 2.0.35 before 2.0.50
DebianDebian Linux
Version 3.0
RedhatEnterprise Linux Server
Version 2.0
RedhatEnterprise Linux Workstation
Version 2.0

Weakness classification

References