Description

Buffer overflow in Apache 2.0.50 and earlier allows local users to gain apache privileges via a .htaccess file that causes the overflow during expansion of environment variables.

Remediation

References

CVE-2004-0747

Related Vulnerabilities

SugarCRM Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-17302)

Drupal Insufficient Verification of Data Authenticity Vulnerability (CVE-2016-9450)

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-0500)

MongoDb Out-of-bounds Read Vulnerability (CVE-2017-14227)

WordPress Plugin PayPal Shopping Cart Multiple Vulnerabilities (1.1.9)

Severity

High

Classification

CVE-2004-0747 CWE-131 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities