CVE Vulnerabilities

CVE-2003-0842

Published: Nov 17, 2003 | Modified: Apr 03, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Stack-based buffer overflow in mod_gzip_printf for mod_gzip 1.3.26.1a and earlier, and possibly later official versions, when running in debug mode, allows remote attackers to execute arbitrary code via a long filename in a GET request with an Accept-Encoding: gzip header.

Affected Software

NameVendorStart VersionEnd Version
Mod_gzipDag_apt_repository1.3.26.1a (including)1.3.26.1a (including)

References