CVE-2004-0940

Fixed in a distro release EPSS 5%

Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as the apache user via SSI (XSSI) documents that trigger a length calculation error.

Published 2004-10-26 · CVE record · OSV

Products: apache http_server, openpkg, hp-ux, slackware_linux, suse_linux, trustix secure_linux

Distro releases