Tenable Network Security
Solutions Products Nessus Demos Partners Online Store
Nessus
Download
Plugins
     Newest Plugins
     Obtain an activation code
     View all plugins
     Search
Documentation
Register
Buy Now
ProfessionalFeed Support
Bugs
All the Tenable Products

Apache mod_proxy Content-Length Overflow
This script is Copyright (C) 2004-2010 David Maciejak

FamilyWeb Servers
Nessus Plugin ID15555 (apache_mod_proxy_buff_overflow.nasl)
Bugtraq ID10508
CVE IDCVE-2004-0492

Description:
Synopsis :

The remote web server is affected by a heap based buffer overflow
vulnerability.

Description :

The remote web server appears to be running a version of Apache that
is older than version 1.3.32.

This version is reportedly vulnerable to a heap based buffer overflow
in proxy_util.c for mod_proxy. This issue may lead remote attackers to
cause a denial of service and possibly execute arbitrary code on the
server.

See also :

http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0276.html
http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0279.html
http://rhn.redhat.com/errata/RHSA-2004-245.html

Solution :

Upgrade to Apache 1.3.32 or later.

Risk factor :

Critical / CVSS Base Score : 10.0
(CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
About us | Whitepapers | Training | Discussion Forums | Support Portal | Blog | RSS feeds | Contact us | Legal | Privacy

© Copyright 2002 - 2010 Tenable Network Security(R). All Rights Reserved.

This is the web site for the Nessus Vulnerability Scanner from Tenable Network Security. If you are looking for the probabilistic analysis software from Southwest Research Institute, please visit www.nessus.swri.org