CVE-2004-0492

Currently unrated

Key Information:

Vendor
HP
Status
Webproxy
Virtualvault
Http Server
Propack
Vendor
CVE Published:
6 August 2004

Summary

Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via a negative Content-Length HTTP header field, which causes a large amount of data to be copied.

References

http://marc.info/?l=bugtraq&m=108711172710140&w=2
mailing-listx_refsource_BUGTRAQ
https://bugzilla.fedora.us/show_bug.cgi?id=1737
vendor-advisoryx_refsource_FEDORA
http://rhn.redhat.com/errata/RHSA-2004-245.html
vendor-advisoryx_refsource_REDHAT

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.