CVE-2004-0488
Fixed in a distro release EPSS 38%
Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN.
Products: apache http_server, debian_linux, redhat enterprise_linux_server, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | apache2 | 2.0.50-1 |
| Debian 13 | apache2 | 2.0.50-1 |
| Debian 14 | apache2 | 2.0.50-1 |
| Debian 3.0 | libapache-mod-ssl | 2.8.9-2.4 |
| Red Hat Enterprise Linux 3 | httpd | 0:2.0.46-32.ent.3 |
| Red Hat Enterprise Linux 3 | httpd-debuginfo | 0:2.0.46-32.ent.3 |
| Red Hat Enterprise Linux 3 | httpd-devel | 0:2.0.46-32.ent.3 |
| Red Hat Enterprise Linux 3 | mod_ssl | 1:2.0.46-32.ent.3 |
| Red Hat network proxy 4.2 | jabberd | 0:2.0s10-3.37.rhn |
| Red Hat network proxy 4.2 | jabberd | 0:2.0s10-3.38.rhn |
| Red Hat network proxy 4.2 | rhn-apache | 0:1.3.27-36.rhn.rhel3 |
| Red Hat network proxy 4.2 | rhn-apache | 0:1.3.27-36.rhn.rhel4 |
| Red Hat network proxy 4.2 | rhn-modperl | 0:1.29-16.rhel3 |
| Red Hat network proxy 4.2 | rhn-modperl | 0:1.29-16.rhel4 |