SSL: Apache mod_ssl ssl_util_uuencode_binary Buffer Overflow

This signature detects attempts to exploit a known vulnerability against Apache mod_ssl module. A successful attack can result in a denial-of-service condition on overflowing the buffer.

Extended Description

A stack-based buffer overflow has been reported in the Apache 'mod_ssl' module. This issue is exposed in utility code for uuencoding binary data. This issue would most likely result in a denial of service if triggered, but could theoretically allow arbitrary code to run. The issue is not believed to be exploitable to execute arbitrary code on x86 architectures, but this may not be the case with other architectures.

Affected Products

Mandriva linux_mandrake

References

BugTraq: 10355

CVE: CVE-2004-0488

Short Name

SSL:APACHE-MOD-SSL

Severity

Major

Recommended

False

Recommended Action

Drop

SSL: Apache mod_ssl ssl_util_uuencode_binary Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?