vulnwire
7.2high

CVE-2003-0542in critical feed

Multiple stack-based buffer overflows in (1) mod_alias and (2) mod_rewrite for Apache before 1.3.29 allow attackers to create configuration…

Published 23 y ago · modified 4 mo ago · JSON

CVSS
7.2
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
30.4%
percentile 98%
Public exploits
0
none known

Multiple stack-based buffer overflows in (1) mod_alias and (2) mod_rewrite for Apache before 1.3.29 allow attackers to create configuration files to cause a denial of service (crash) or execute arbitrary code via a regular expression with more than 9 captures.

Exploit prediction (EPSS)

30.43% probability of exploitation in the next 30 days, higher than 98% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.07.2AV:L/AC:L/Au:N/C:C/I:C/A:C

Classification

Weakness
  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
Technology feeds
Apache HTTP Server (RSS, critical only)

References

  • redhat.com /support/errata/RHSA-2004-015.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • secunia.com /advisories/10112 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • kb.cert.org /vuls/id/434566 · third-party-advisory, x_refsource_CERT-VN, x_transferred
  • secunia.com /advisories/10593 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • mandrakesecure.net /en/advisories/advisory.php?name=MDKSA-2003:103 · vendor-advisory, x_refsource_MANDRAKE, x_transferred
  • redhat.com /support/errata/RHSA-2003-360.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • marc.info /?l=bugtraq&m=130497311408250&w=2 · vendor-advisory, x_refsource_HP, x_transferred
  • httpd.apache.org /dist/httpd/Announcement2.html · x_refsource_CONFIRM, x_transferred
  • lists.apple.com /mhonarc/security-announce/msg00045.html · x_refsource_CONFIRM, x_transferred
  • lists.apple.com /archives/security-announce/2004/Jan/msg00000.html · vendor-advisory, x_refsource_APPLE, x_transferred
  • redhat.com /support/errata/RHSA-2003-405.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3799 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • securityfocus.com /bid/9504 · vdb-entry, x_refsource_BID, x_transferred
  • securityfocus.com /archive/1/342674 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9458 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • secunia.com /advisories/10102 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/13400 · vdb-entry, x_refsource_XF, x_transferred
  • securityfocus.com /advisories/6079 · vendor-advisory, x_refsource_HP, x_transferred
  • redhat.com /support/errata/RHSA-2005-816.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • secunia.com /advisories/10153 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/10098 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/10264 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A864 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • secunia.com /advisories/10580 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • sunsolve.sun.com /search/document.do?assetkey=1-26-101841-1 · vendor-advisory, x_refsource_SUNALERT, x_transferred
  • redhat.com /support/errata/RHSA-2003-320.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • sunsolve.sun.com /search/document.do?assetkey=1-26-101444-1 · vendor-advisory, x_refsource_SUNALERT, x_transferred
  • secunia.com /advisories/10260 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/10463 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • marc.info /?l=bugtraq&m=106761802305141&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • kb.cert.org /vuls/id/549142 · third-party-advisory, x_refsource_CERT-VN, x_transferred
  • docs.info.apple.com /article.html?artnum=61798 · x_refsource_CONFIRM, x_transferred
  • secunia.com /advisories/10096 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/10114 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securityfocus.com /bid/8911 · vdb-entry, x_refsource_BID, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A863 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • lists.apache.org /thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apach · mailing-list, x_refsource_MLIST, x_transferred
  • lists.apache.org /thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apach · mailing-list, x_refsource_MLIST, x_transferred
  • lists.apache.org /thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apac · mailing-list, x_refsource_MLIST, x_transferred
  • lists.apache.org /thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apac · mailing-list, x_refsource_MLIST, x_transferred
  • lists.apache.org /thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apac
  • lists.apache.org /thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apac
  • lists.apache.org /thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apac
  • lists.apache.org /thread.html/r7035b7c9091c4b665a3b7205364775410646f12125d48e74e395f2ce%40%3Ccvs.httpd.apac

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.