Description

Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via a negative Content-Length HTTP header field, which causes a large amount of data to be copied.

Remediation

References

CVE-2004-0492

Related Vulnerabilities

WordPress Plugin HashThemes Demo Importer Security Bypass (1.1.1)

WordPress Plugin Bind Users to Taxonomy Cross-Site Scripting (0.3)

Apache Tomcat Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2008-2938)

osTicket Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-1319)

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-4536)

Severity

Critical

Classification

CVE-2004-0492

Tags

Missing Update Known Vulnerabilities