CVE-2004-0940: Buffer Overflow
Buffer overflow in the gettag function in modinclude for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as the apache user via SSI (XSSI) documents that trigger a length calculation error.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0940?
CVE-2004-0940 is classified as a high severity vulnerability due to the potential for arbitrary code execution.
How do I fix CVE-2004-0940?
To mitigate CVE-2004-0940, you should upgrade to Apache HTTP Server version 1.3.33 or later.
Who is affected by CVE-2004-0940?
CVE-2004-0940 affects users running Apache HTTP Server versions 1.3.x up to and including 1.3.32.
What type of attack does CVE-2004-0940 enable?
CVE-2004-0940 enables local users to execute arbitrary code through crafted Server Side Includes (SSI) documents.
Is CVE-2004-0940 a remote or local vulnerability?
CVE-2004-0940 is a local vulnerability, as it requires authenticated access to the server to exploit.