NetSight
IP …
critical10.0

CVE-2004-0492

Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (process crash) and po…

Impact

Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via a negative Content-Length HTTP header field, which causes a large amount of data to be copied.

Affected products

VendorProductAffected versions
ApacheHttp Server
Versions 1.3.26, 1.3.27, 1.3.28, 1.3.29, 1.3.31
HpVirtualvault
Version 11.0.4
HpWebproxy
Versions 2.0, 2.1
IbmHttp Server
Versions 1.3.26, 1.3.26.1, 1.3.26.2, 1.3.28
SgiPropack
Version 2.4
HpVvos
Version 11.04
OpenbsdOpenbsd
All versions
Versions 3.4, 3.5

References