Tracker / CVE-2004-0940
CVE-2004-0940
High 7.8
Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as the apache user via SSI (XSSI) documents that trigger a length calculation error.
Affected products and versions
| apache | http_server · 1.3 → 1.3.32 |
|---|---|
| hp | hp-ux |
| openpkg | openpkg |
| slackware | slackware_linux |
| suse | suse_linux |
| trustix | secure_linux |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.