exploits , vulnerabilities , articles , Apache Mod_SSL SSL_Util_UUEncode_Binary Stack Buffer Overflow Vulnerability

Title	Apache Mod_SSL SSL_Util_UUEncode_Binary Stack Buffer Overflow Vulnerability
Published	2004-05-17-12:00AM
Updated	2005-11-02-05:07PM
Class	Boundary Condition Error
CVE	CAN-2004-0488
Remote	Yes
Local	No
Credit	Discovery is credited to Georgi Guninski.
Vulnerable	Turbolinux Turbolinux Server 10.0 Turbolinux Turbolinux Desktop 10.0 Turbolinux Home Trustix Secure Linux 2.1 Trustix Secure Linux 2.0 Trustix Secure Linux 1.5 Trustix Secure Enterprise Linux 2.0 tinysofa enterprise server 1.0 U1 tinysofa enterprise server 1.0 SGI ProPack 2.4 RedHat Stronghold 4.0 RedHat Linux 7.3 i686 RedHat Linux 7.3 i386 RedHat Linux 7.3 RedHat Enterprise Linux WS 2.1 IA64 RedHat Enterprise Linux WS 2.1 RedHat Enterprise Linux ES 2.1 IA64 RedHat Enterprise Linux ES 2.1 RedHat Enterprise Linux AS 2.1 IA64 RedHat Enterprise Linux AS 2.1 RedHat Advanced Workstation for the Itanium Processor 2.1 IA64 RedHat Advanced Workstation for the Itanium Processor 2.1 OpenBSD OpenBSD 3.5 OpenBSD OpenBSD 3.4 OpenBSD OpenBSD current mod_ssl mod_ssl 2.8.16 MandrakeSoft Linux Mandrake 10.0 MandrakeSoft Linux Mandrake 10.0 amd64 mod_ssl mod_ssl 2.8.15 MandrakeSoft Linux Mandrake 9.2 MandrakeSoft Linux Mandrake 9.2 amd64 mod_ssl mod_ssl 2.8.12 MandrakeSoft Linux Mandrake 9.1 MandrakeSoft Linux Mandrake 9.1 ppc mod_ssl mod_ssl 2.8.10 Apache Software Foundation Apache 1.3.26 MandrakeSoft Corporate Server 2.1 MandrakeSoft Corporate Server 2.1 x86_64 Slackware Linux 8.1 mod_ssl mod_ssl 2.8.9 Apache Software Foundation Apache 1.3.26 Debian Linux 2.2 Debian Linux 2.2 68k Debian Linux 2.2 alpha Debian Linux 2.2 arm Debian Linux 2.2 IA32 Debian Linux 2.2 powerpc Debian Linux 2.2 sparc Debian Linux 3.0 Debian Linux 3.0 alpha Debian Linux 3.0 arm Debian Linux 3.0 hppa Debian Linux 3.0 ia32 Debian Linux 3.0 ia64 Debian Linux 3.0 m68k Debian Linux 3.0 mips Debian Linux 3.0 mipsel Debian Linux 3.0 ppc Debian Linux 3.0 s/390 Debian Linux 3.0 sparc HP Secure OS software for Linux 1.0 Slackware Linux 8.1 mod_ssl mod_ssl 2.8.7 Apache Software Foundation Apache 1.3.23 MandrakeSoft Multi Network Firewall 2.0 RedHat Linux 7.3 RedHat Linux 7.3 i386 MandrakeSoft Multi Network Firewall 2.0 MandrakeSoft Linux Mandrake 10.0 amd64 MandrakeSoft Linux Mandrake 10.0 MandrakeSoft Linux Mandrake 9.2 amd64 MandrakeSoft Linux Mandrake 9.2 MandrakeSoft Linux Mandrake 9.1 ppc MandrakeSoft Linux Mandrake 9.1 MandrakeSoft Corporate Server 2.1 x86_64 MandrakeSoft Corporate Server 2.1 HP Webproxy A.02.10 HP HPUX B.11.04 HP Webproxy A.02.00 HP VirtualVault A.04.70 HP HPUX B.11.04 HP VirtualVault A.04.60 HP HPUX B.11.04 HP VirtualVault A.04.50 HP HPUX B.11.04 HP OpenVMS Secure Web Server 7.3 2 HP OpenVMS Secure Web Server 7.3 1 HP OpenVMS Secure Web Server 7.3 HP OpenVMS Secure Web Server 7.2 2 HP HPUX B.11.23 HP HPUX B.11.22 HP HPUX B.11.11 HP HPUX B.11.11 HP HPUX B.11.00 HP Compaq Secure Web Server for OpenVMS 2.0 PHP HP Compaq Secure Web Server for OpenVMS 2.0 HP Compaq Secure Web Server for OpenVMS 1.3 HP Compaq Secure Web Server for OpenVMS 1.2 Gentoo Linux 1.4 Debian Linux 3.0 sparc Debian Linux 3.0 s/390 Debian Linux 3.0 ppc Debian Linux 3.0 mipsel Debian Linux 3.0 mips Debian Linux 3.0 m68k Debian Linux 3.0 ia64 Debian Linux 3.0 ia32 Debian Linux 3.0 hppa Debian Linux 3.0 arm Debian Linux 3.0 alpha Debian Linux 3.0 Apple Mac OS X Server 10.3.5 Apple Mac OS X Server 10.3.4 Apple Mac OS X Server 10.2.8 Apple Mac OS X 10.3.5 Apple Mac OS X 10.3.4 Apple Mac OS X 10.2.8 Apache Software Foundation Apache 2.0.49 S.u.S.E. Linux Personal 9.1 Trustix Secure Linux 2.0 Trustix Secure Linux 2.1 Apache Software Foundation Apache 2.0.48 MandrakeSoft Linux Mandrake 10.0 MandrakeSoft Linux Mandrake 10.0 amd64 S.u.S.E. Linux 8.1 S.u.S.E. Linux Personal 8.2 S.u.S.E. Linux Personal 9.0 S.u.S.E. Linux Personal 9.0 x86_64 Trustix Secure Linux 2.0 Trustix Secure Linux 2.1 Apache Software Foundation Apache 2.0.47 Apache Software Foundation Apache 2.0.46 RedHat Desktop 3.0 RedHat Enterprise Linux AS 3 RedHat Enterprise Linux ES 3 RedHat Enterprise Linux WS 3 Trustix Secure Linux 2.0 Apache Software Foundation Apache 2.0.45 Apple Mac OS X 10.0 Apple Mac OS X 10.0.1 Apple Mac OS X 10.0.2 Apple Mac OS X 10.0.3 Apple Mac OS X 10.0.4 Apple Mac OS X 10.1 Apple Mac OS X 10.1 Apple Mac OS X 10.1.1 Apple Mac OS X 10.1.2 Apple Mac OS X 10.1.3 Apple Mac OS X 10.1.4 Apple Mac OS X 10.1.5 Apple Mac OS X 10.2 Apple Mac OS X 10.2.1 Apple Mac OS X 10.2.2 Apple Mac OS X 10.2.3 Apple Mac OS X 10.2.4 Apple Mac OS X 10.2.5 Apple Mac OS X 10.2.6 Conectiva Linux 9.0 Apache Software Foundation Apache 2.0.44 Apache Software Foundation Apache 2.0.43 Apache Software Foundation Apache 2.0.42 Apache Software Foundation Apache 2.0.41 Apache Software Foundation Apache 2.0.40 RedHat Linux 8.0 RedHat Linux 9.0 i386 Terra Soft Solutions Yellow Dog Linux 3.0 Apache Software Foundation Apache 2.0.39 Apache Software Foundation Apache 2.0.38 Apache Software Foundation Apache 2.0.37 Apache Software Foundation Apache 2.0.36 Apache Software Foundation Apache 2.0.35 Apache Software Foundation Apache 2.0.32 Apache Software Foundation Apache 2.0.28 Beta Apache Software Foundation Apache 2.0.28 Apache Software Foundation Apache 2.0 a9 Apache Software Foundation Apache 2.0 Apache Software Foundation Apache 1.3.31 OpenPKG OpenPKG Current Apache Software Foundation Apache 1.3.29 Apple Mac OS X 10.2.7 Apple Mac OS X 10.3.5 Apple Mac OS X Server 10.2.7 Apple Mac OS X Server 10.3.5 MandrakeSoft Linux Mandrake 10.0 MandrakeSoft Linux Mandrake 10.0 amd64 OpenPKG OpenPKG 2.0 Apache Software Foundation Apache 1.3.28 Conectiva Linux 8.0 MandrakeSoft Linux Mandrake 9.2 MandrakeSoft Linux Mandrake 9.2 amd64 OpenBSD OpenBSD 3.4 OpenPKG OpenPKG 1.3 Apache Software Foundation Apache 1.3.27 HP HPUX (VVOS) 11.0 4 HP VirtualVault 4.5 HP VirtualVault 4.6 HP Webproxy 2.0 Immunix Immunix OS 7 MandrakeSoft Linux Mandrake 9.1 MandrakeSoft Linux Mandrake 9.1 ppc OpenBSD OpenBSD 3.3 OpenPKG OpenPKG Current RedHat Enterprise Linux AS 2.1 RedHat Enterprise Linux AS 2.1 IA64 RedHat Enterprise Linux ES 2.1 RedHat Enterprise Linux ES 2.1 IA64 RedHat Enterprise Linux WS 2.1 RedHat Enterprise Linux WS 2.1 IA64 RedHat Linux Advanced Work Station 2.1 SGI IRIX 6.5.19 Apache Software Foundation Apache 1.3.26 Conectiva Linux 6.0 Conectiva Linux 7.0 Conectiva Linux 8.0 Debian Linux 3.0 alpha Debian Linux 3.0 arm Debian Linux 3.0 hppa Debian Linux 3.0 ia32 Debian Linux 3.0 ia64 Debian Linux 3.0 m68k Debian Linux 3.0 mips Debian Linux 3.0 mipsel Debian Linux 3.0 ppc Debian Linux 3.0 s/390 Debian Linux 3.0 sparc MandrakeSoft Corporate Server 2.1 MandrakeSoft Corporate Server 2.1 x86_64 MandrakeSoft Linux Mandrake 9.0 OpenPKG OpenPKG 1.1 Trustix Secure Linux 1.1 Trustix Secure Linux 1.2 Trustix Secure Linux 1.5 Apache Software Foundation Apache 1.3.25 Apache Software Foundation Apache 1.3.24 Apache Software Foundation Apache 1.3.23 Apache Software Foundation Apache 1.3.22 Apache Software Foundation Apache 1.3.20 HP HPUX 11.20 HP HPUX 11.22 MandrakeSoft Single Network Firewall 7.2 S.u.S.E. Linux 7.3 S.u.S.E. Linux 7.3 i386 S.u.S.E. Linux 7.3 ppc S.u.S.E. Linux 7.3 sparc SGI IRIX 6.5.12 SGI IRIX 6.5.12 f SGI IRIX 6.5.12 m SGI IRIX 6.5.13 SGI IRIX 6.5.13 f SGI IRIX 6.5.13 m SGI IRIX 6.5.14 SGI IRIX 6.5.14 f SGI IRIX 6.5.14 m SGI IRIX 6.5.15 SGI IRIX 6.5.16 SGI IRIX 6.5.17 SGI IRIX 6.5.18 Slackware Linux 8.0 Sun Cobalt Control Station 4100CS Sun Cobalt RaQ 550 Sun Solaris 9.0 Sun Solaris 9.0 _x86 Sun Solaris 9.0 _x86 Update 2 Sun SunOS 5.9 Sun SunOS 5.9 _x86 Apache Software Foundation Apache 1.3.19 Apple Mac OS X 10.0.3 Caldera OpenLinux 2.4 Debian Linux 2.3 Digital (Compaq) TRU64/DIGITAL UNIX 4.0 f Digital (Compaq) TRU64/DIGITAL UNIX 4.0 g Digital (Compaq) TRU64/DIGITAL UNIX 5.0 EnGarde Secure Linux 1.0.1 FreeBSD FreeBSD 3.5.1 FreeBSD FreeBSD 4.2 HP HPUX 10.20 HP HPUX 11.0 HP HPUX 11.0 4 HP HPUX 11.11 HP Secure OS software for Linux 1.0 HP VirtualVault 4.5 MandrakeSoft Linux Mandrake 7.1 MandrakeSoft Linux Mandrake 7.2 MandrakeSoft Linux Mandrake 8.0 MandrakeSoft Linux Mandrake 8.1 NetBSD NetBSD 1.5 NetBSD NetBSD 1.5.1 OpenBSD OpenBSD 2.8 OpenBSD OpenBSD 2.9 OpenBSD OpenBSD 3.0 RedHat Linux 6.2 RedHat Linux 7.0 RedHat Linux 7.1 S.u.S.E. Linux 6.4 S.u.S.E. Linux 6.4 alpha S.u.S.E. Linux 6.4 i386 S.u.S.E. Linux 6.4 ppc S.u.S.E. Linux 7.0 S.u.S.E. Linux 7.0 alpha S.u.S.E. Linux 7.0 i386 S.u.S.E. Linux 7.0 ppc S.u.S.E. Linux 7.0 sparc S.u.S.E. Linux 7.1 S.u.S.E. Linux 7.1 alpha S.u.S.E. Linux 7.1 ppc S.u.S.E. Linux 7.1 sparc S.u.S.E. Linux 7.1 x86 S.u.S.E. Linux 7.2 S.u.S.E. Linux 7.2 i386 SCO eDesktop 2.4 SCO eServer 2.3.1 SGI IRIX 6.5.8 SGI IRIX 6.5.9 Sun Solaris 7.0 Sun Solaris 8.0 Apache Software Foundation Apache 1.3.18 Apache Software Foundation Apache 1.3.17 MandrakeSoft Corporate Server 1.0.1 MandrakeSoft Linux Mandrake 8.0 MandrakeSoft Linux Mandrake 8.0 ppc OpenBSD OpenBSD 2.8 S.u.S.E. Linux 7.1 Apache Software Foundation Apache 1.3.14 Apache Software Foundation Apache 1.3.12 NetScreen NetScreenGlobal PRO Express Policy Manager Server NetScreen NetScreenGlobal PRO Policy Manager Server OpenBSD OpenBSD 2.8 RedHat Linux 6.2 alpha RedHat Linux 6.2 i386 RedHat Linux 6.2 sparc RedHat Linux 7.0 alpha RedHat Linux 7.0 i386 S.u.S.E. Linux 7.0 S.u.S.E. Linux 7.0 sparc Sun Cobalt ManageRaQ v2 3599BD Sun Cobalt Qube3 4000WG Sun Cobalt RaQ XTR 3500R Sun Cobalt RaQ4 3001R Apache Software Foundation Apache 1.3.11 Apache Software Foundation Apache 1.3.9 Debian Linux 2.2 Debian Linux 2.2 68k Debian Linux 2.2 alpha Debian Linux 2.2 arm Debian Linux 2.2 powerpc Debian Linux 2.2 sparc NetScreen NetScreenGlobal PRO Express Policy Manager Server NetScreen NetScreenGlobal PRO Policy Manager Server Sun Solaris 8.0 Sun Solaris 8.0 _x86 Sun SunOS 5.8 Sun SunOS 5.8 _x86 Apache Software Foundation Apache 1.3.7 dev Apache Software Foundation Apache 1.3.6 Apache Software Foundation Apache 1.3.4 Apache Software Foundation Apache 1.3.3 RedHat Linux 5.2 alpha RedHat Linux 5.2 i386 RedHat Linux 5.2 sparc Apache Software Foundation Apache 1.3.1 Apache Software Foundation Apache 1.3
Not Vulnerable	Apache Software Foundation Apache 2.0.50 MandrakeSoft Linux Mandrake 10.1 MandrakeSoft Linux Mandrake 10.1 x86_64
Code	Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: content@securitydot.net <mailto:content@securitydot.net>.
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-16 IBM WebSphere Application Server JNDI Remote Information Disclosure Vulnerability
2009-12-16 Horde Application Framework Administration Interface Cross-Site Scripting Vulnerability
2009-12-16 Mozilla Firefox and SeaMonkey MFSA 2009-65 through -71 Multiple Vulnerabilities
2009-12-16 Merkaartor Insecure Temporary File Creation Vulnerability
2009-12-15 TYPO3 Watchdog (aba_watchdog) Unspecified Information Disclosure Vulnerability
2009-12-15 PostgreSQL Index Function Session State Modification Local Privilege Escalation Vulnerability
2009-12-15 PostgreSQL NULL Character CA SSL Certificate Validation Security Bypass Vulnerability
2009-12-15 IBM DB2 prior to 9.5 Fix Pack 5 Multiple Unspecified Security Vulnerabilities
2009-12-15 Sun Ray Server Software Desktop Session Handling Local Security Bypass Vulnerability
2009-12-15 Mozilla Firefox Sage Extension RSS Feeds Cross Domain Scripting Vulnerability