CVE-2004-0488
CVE-2004-0488
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN.
EPSS 37.7% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://www.trustix.net/errata/2004/0031/
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11458
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:054
- http://www.redhat.com/support/errata/RHSA-2004-342.html
- http://rhn.redhat.com/errata/RHSA-2004-245.html
- http://security.gentoo.org/glsa/glsa-200406-05.xml
- http://marc.info/?l=bugtraq&m=108567431823750&w=2
- http://www.redhat.com/support/errata/RHSA-2004-405.html
- http://marc.info/?l=bugtraq&m=109215056218824&w=2
- http://www.redhat.com/support/errata/RHSA-2005-816.html
- http://marc.info/?l=bugtraq&m=109181600614477&w=2
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021610.html
- http://www.securityfocus.com/bid/10355
- http://www.debian.org/security/2004/dsa-532
- https://bugzilla.fedora.us/show_bug.cgi?id=1888
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:055
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16214
- http://marc.info/?l=bugtraq&m=108619129727620&w=2
- https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E
- https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E
- https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E
- https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E
- https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E
- https://nvd.nist.gov/vuln/detail/CVE-2004-0488