CVE-2004-0492: Buffer Overflow
Heap-based buffer overflow in proxyutil.c for modproxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via a negative Content-Length HTTP header field, which causes a large amount of data to be copied.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0492?
CVE-2004-0492 has been rated as a moderate severity vulnerability due to its potential to cause denial of service and possible arbitrary code execution.
How do I fix CVE-2004-0492?
The recommended fix for CVE-2004-0492 is to upgrade to a safe version of Apache HTTP Server that is not affected, specifically versions 1.3.32 or later.
Which software is affected by CVE-2004-0492?
CVE-2004-0492 affects Apache HTTP Server versions 1.3.25 to 1.3.31 and several other products that utilize affected versions of Apache.
Can CVE-2004-0492 lead to data breaches?
While CVE-2004-0492 primarily causes denial of service, it also carries the risk of executing arbitrary code, which could potentially lead to data breaches.
What can an attacker do with CVE-2004-0492?
An attacker can exploit CVE-2004-0492 to crash the server or potentially execute malicious code by sending specially crafted HTTP requests.