NetSight
IP …
high7.8Public exploit code

CVE-2004-0940

Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as the apache user via SSI (XSSI) documents that trigger a length calculation error.

Affected products

VendorProductAffected versions
ApacheHttp Server
from 1.3 through 1.3.32
OpenpkgOpenpkg
Versions 2.0, 2.1, 2.2
HpHp-Ux
Versions 11.00, 11.11, 11.20, 11.22
SlackwareSlackware Linux
Versions 8.0, 8.1, 9.0, 9.1, 10.0, current
SuseSuse Linux
Versions 8.0, 8.1, 8.2, 9.0, 9.1, 9.2
TrustixSecure Linux
Version 1.5

Weakness classification

CWE-131

References