FTP: Apache mod_include SSL Buffer Overflow

This signature detects attempts to exploit a known vulnerability in Apache web server. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the targeted server.

Extended Description

The problem presents itself when the affected module attempts to parse mod_include-specific tag values. A failure to properly validate the lengths of user-supplied tag strings before copying them into finite buffers facilitates the overflow. A local attacker may leverage this issue to execute arbitrary code on the affected computer with the privileges of the affected Apache server.

Affected Products

Slackware linux

References

BugTraq: 11471

CVE: CVE-2004-0940

Short Name

FTP:EXPLOIT:MOD-INCLUDE-BOF

Severity

Minor

Recommended

False

Recommended Action

None

FTP: Apache mod_include SSL Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?