Attacker Value
Unknown
CVE-2004-0940
CVE-2004-0940
(Last updated February 02, 2024) ▾
MITRE ATT&CK
Log in to add MITRE ATT&CK tag
Add MITRE ATT&CK tactics and techniques that apply to this CVE.
Description
Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as the apache user via SSI (XSSI) documents that trigger a length calculation error.
Add Assessment
No one has assessed this topic. Be the first to add your voice to the community.
CVSS V3 Severity and Metrics
Data provided by the National Vulnerability Database (NVD)
Base Score:
7.8 High
Impact Score:
5.9
Exploitability Score:
1.8
Attack Vector (AV):
Local
Attack Complexity (AC):
Low
Privileges Required (PR):
Low
User Interaction (UI):
None
Scope (S):
Unchanged
Confidentiality (C):
High
Integrity (I):
High
Availability (A):
High
General Information
Vendors
- apache,
- hp,
- openpkg,
- slackware,
- suse,
- trustix
Products
- hp-ux 11.00,
- hp-ux 11.11,
- hp-ux 11.20,
- hp-ux 11.22,
- http server,
- openpkg 2.0,
- openpkg 2.1,
- openpkg 2.2,
- secure linux 1.5,
- slackware linux 10.0,
- slackware linux 8.0,
- slackware linux 8.1,
- slackware linux 9.0,
- slackware linux 9.1,
- slackware linux current,
- suse linux 8.0,
- suse linux 8.1,
- suse linux 8.2,
- suse linux 9.0,
- suse linux 9.1,
- suse linux 9.2
References
Advisory
