CVE-beschrijvingen

Multiple stack-based buffer overflows in (1) mod_alias and (2) mod_rewrite for Apache before 1.3.29 allow attackers to create configuration files to cause a denial of service (crash) or execute arbitrary code via a regular expression with more than 9 captures.

CVE-informatie

Gerelateerde zwakheden

CWE-ID	Zwakheidsnaam	Bron
CWE-119	Improper Restriction of Operations within the Bounds of a Memory Buffer The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.

Metriek

Metriek	Score	Ernst	CVSS Vector	Bron
V2	7.2		AV:L/AC:L/Au:N/C:C/I:C/A:C	nvd@nist.gov

EPSS

EPSS is een scoremodel dat de kans voorspelt dat een kwetsbaarheid wordt uitgebuit.

EPSS-score

Het EPSS-model produceert een kans score tussen 0 en 1 (0 en 100%). Hoe hoger de score, hoe groter de kans dat een kwetsbaarheid wordt uitgebuit.

EPSS-percentiel

Het percentiel wordt gebruikt om CVE's te rangschikken op basis van hun EPSS-score. Een CVE in het 95e percentiel heeft bijvoorbeeld een grotere kans om te worden uitgebuit dan 95% van de andere CVE's. Het percentiel wordt dus gebruikt om de EPSS-score van een CVE te vergelijken met die van andere CVE's.

EPSS First.org

Vermelde producten

Configuratie 0

Apache>>Http_server >> Version 1.3

Apache>>Http_server >> Version 1.3.1

Apache>>Http_server >> Version 1.3.3

Apache>>Http_server >> Version 1.3.4

Apache>>Http_server >> Version 1.3.6

Apache>>Http_server >> Version 1.3.9

Apache>>Http_server >> Version 1.3.11

Apache>>Http_server >> Version 1.3.12

Apache>>Http_server >> Version 1.3.14

Apache>>Http_server >> Version 1.3.17

Apache>>Http_server >> Version 1.3.18

Apache>>Http_server >> Version 1.3.19

Apache>>Http_server >> Version 1.3.20

Apache>>Http_server >> Version 1.3.22

Apache>>Http_server >> Version 1.3.23

Apache>>Http_server >> Version 1.3.24

Apache>>Http_server >> Version 1.3.25

Apache>>Http_server >> Version 1.3.26

Apache>>Http_server >> Version 1.3.27

Apache>>Http_server >> Version 1.3.28

Apache>>Http_server >> Version 2.0

Apache>>Http_server >> Version 2.0.28

Apache>>Http_server >> Version 2.0.32

Apache>>Http_server >> Version 2.0.35

Apache>>Http_server >> Version 2.0.36

Apache>>Http_server >> Version 2.0.37

Apache>>Http_server >> Version 2.0.38

Apache>>Http_server >> Version 2.0.39

Apache>>Http_server >> Version 2.0.40

Apache>>Http_server >> Version 2.0.41

Apache>>Http_server >> Version 2.0.42

Apache>>Http_server >> Version 2.0.43

Apache>>Http_server >> Version 2.0.44

Apache>>Http_server >> Version 2.0.45

Apache>>Http_server >> Version 2.0.46

Apache>>Http_server >> Version 2.0.47

Referenties

ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc
Tags : vendor-advisory, x_refsource_SGI

http://www.redhat.com/support/errata/RHSA-2004-015.html
Tags : vendor-advisory, x_refsource_REDHAT

http://secunia.com/advisories/10112
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.kb.cert.org/vuls/id/434566
Tags : third-party-advisory, x_refsource_CERT-VN

http://secunia.com/advisories/10593
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2003:103
Tags : vendor-advisory, x_refsource_MANDRAKE

http://www.redhat.com/support/errata/RHSA-2003-360.html
Tags : vendor-advisory, x_refsource_REDHAT

http://marc.info/?l=bugtraq&m=130497311408250&w=2
Tags : vendor-advisory, x_refsource_HP

http://httpd.apache.org/dist/httpd/Announcement2.html
Tags : x_refsource_CONFIRM

http://lists.apple.com/mhonarc/security-announce/msg00045.html
Tags : x_refsource_CONFIRM

http://lists.apple.com/archives/security-announce/2004/Jan/msg00000.html
Tags : vendor-advisory, x_refsource_APPLE

ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.6/SCOSA-2004.6.txt
Tags : vendor-advisory, x_refsource_SCO

http://www.redhat.com/support/errata/RHSA-2003-405.html
Tags : vendor-advisory, x_refsource_REDHAT

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3799
Tags : vdb-entry, signature, x_refsource_OVAL

http://www.securityfocus.com/bid/9504
Tags : vdb-entry, x_refsource_BID

http://www.securityfocus.com/archive/1/342674
Tags : mailing-list, x_refsource_BUGTRAQ

ftp://patches.sgi.com/support/free/security/advisories/20031203-01-U.asc
Tags : vendor-advisory, x_refsource_SGI

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9458
Tags : vdb-entry, signature, x_refsource_OVAL

http://secunia.com/advisories/10102
Tags : third-party-advisory, x_refsource_SECUNIA

https://exchange.xforce.ibmcloud.com/vulnerabilities/13400
Tags : vdb-entry, x_refsource_XF

http://www.securityfocus.com/advisories/6079
Tags : vendor-advisory, x_refsource_HP

http://www.redhat.com/support/errata/RHSA-2005-816.html
Tags : vendor-advisory, x_refsource_REDHAT

http://secunia.com/advisories/10153
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/10098
Tags : third-party-advisory, x_refsource_SECUNIA

http://marc.info/?l=bugtraq&m=130497311408250&w=2
Tags : vendor-advisory, x_refsource_HP

http://secunia.com/advisories/10264
Tags : third-party-advisory, x_refsource_SECUNIA

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A864
Tags : vdb-entry, signature, x_refsource_OVAL

http://secunia.com/advisories/10580
Tags : third-party-advisory, x_refsource_SECUNIA

http://sunsolve.sun.com/search/document.do?assetkey=1-26-101841-1
Tags : vendor-advisory, x_refsource_SUNALERT

http://www.redhat.com/support/errata/RHSA-2003-320.html
Tags : vendor-advisory, x_refsource_REDHAT

http://sunsolve.sun.com/search/document.do?assetkey=1-26-101444-1
Tags : vendor-advisory, x_refsource_SUNALERT

http://secunia.com/advisories/10260
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/10463
Tags : third-party-advisory, x_refsource_SECUNIA

http://marc.info/?l=bugtraq&m=106761802305141&w=2
Tags : mailing-list, x_refsource_BUGTRAQ

http://www.kb.cert.org/vuls/id/549142
Tags : third-party-advisory, x_refsource_CERT-VN

http://docs.info.apple.com/article.html?artnum=61798
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/10096
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/10114
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.securityfocus.com/bid/8911
Tags : vdb-entry, x_refsource_BID

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A863
Tags : vdb-entry, signature, x_refsource_OVAL

https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/re028d61fe612b0908595d658b9b39e74bca56f2a1ed3c5f06b5ab571%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/r7035b7c9091c4b665a3b7205364775410646f12125d48e74e395f2ce%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/raa117ef183f0da9b3f46efbeaa66f7622bd68868a450cae4fd8ed594%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

Datum	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	5.53%	–	–
2022-04-03	–	–	5.53%	–	–
2022-07-17	–	–	5.53%	–	–
2022-07-24	–	–	5.53%	–	–
2022-08-28	–	–	5.53%	–	–
2023-03-12	–	–	–	0.07%	–
2023-05-07	–	–	–	0.1%	–
2023-07-09	–	–	–	0.1%	–
2024-02-11	–	–	–	0.1%	–
2024-04-07	–	–	–	0.1%	–
2024-06-02	–	–	–	0.1%	–
2024-08-04	–	–	–	0.1%	–
2024-08-11	–	–	–	0.1%	–
2024-11-03	–	–	–	0.1%	–
2024-12-22	–	–	–	0.08%	–
2025-01-19	–	–	–	0.08%	–
2025-01-19	–	–	–	0.08%	–
2025-03-18	–	–	–	–	0.41%
2025-03-30	–	–	–	–	0.41%
2025-04-15	–	–	–	–	0.41%
2025-07-04	–	–	–	–	0.52%
2025-07-30	–	–	–	–	0.67%
2025-08-01	–	–	–	–	0.67%
2025-08-04	–	–	–	–	0.67%
2025-10-01	–	–	–	–	0.52%
2025-10-27	–	–	–	–	0.67%
2025-10-28	–	–	–	–	0.52%
2025-11-18	–	–	–	–	0.52%
2025-11-21	–	–	–	–	0.52%
2025-12-27	–	–	–	–	0.67%
2025-12-28	–	–	–	–	0.52%
2026-03-01	–	–	–	–	0.52%
2026-03-05	–	–	–	–	0.52%

Datum	Percentiel
2022-02-06	77%
2022-04-03	89%
2022-07-17	9%
2022-07-24	89%
2022-08-28	9%
2023-03-12	28%
2023-05-07	39%
2023-07-09	4%
2024-02-11	39%
2024-04-07	4%
2024-06-02	41%
2024-08-04	4%
2024-08-11	41%
2024-11-03	42%
2024-12-22	36%
2025-01-19	37%
2025-01-19	37%
2025-03-18	59%
2025-03-30	58%
2025-04-15	6%
2025-07-04	66%
2025-07-30	7%
2025-08-01	71%
2025-08-04	7%
2025-10-01	66%
2025-10-27	71%
2025-10-28	66%
2025-11-18	64%
2025-11-21	66%
2025-12-27	71%
2025-12-28	66%
2026-03-01	67%
2026-03-05	67%

CVE-2003-0542 : Detail

CVE-2003-0542