CVE Vulnerabilities

CVE-2003-0842

Published: Nov 17, 2003 | Modified: Oct 18, 2016
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Stack-based buffer overflow in mod_gzip_printf for mod_gzip 1.3.26.1a and earlier, and possibly later official versions, when running in debug mode, allows remote attackers to execute arbitrary code via a long filename in a GET request with an Accept-Encoding: gzip header.

Affected Software

Name Vendor Start Version End Version
Mod_gzip Dag_apt_repository 1.3.26.1a 1.3.26.1a

References