exploits , vulnerabilities , articles , Apache Mod_SSL Log Function Format String Vulnerability

Title	Apache Mod_SSL Log Function Format String Vulnerability
Published	2004-07-16-12:00AM
Updated	2005-07-15-03:02PM
Class	Input Validation Error
CVE	CAN-2004-0700
Remote	Yes
Local	No
Credit	Discovery is credited to Virulent and Ralf S. Engelschall.
Vulnerable	VMWare ESX Server 2.1.2 VMWare ESX Server 2.1.1 VMWare ESX Server 2.1 VMWare ESX Server 2.0.1 build 6403 VMWare ESX Server 2.0.1 VMWare ESX Server 2.0 build 5257 VMWare ESX Server 2.0 VMWare ESX Server 1.5.2 RedHat Linux 7.3 i686 RedHat Linux 7.3 i386 RedHat Linux 7.3 Oracle Oracle HTTP Server for Apps only 1.0.2 .1s Oracle Oracle HTTP Server 9.2 .0 Apache Software Foundation Apache 1.3.22 Oracle Oracle HTTP Server 9.1 Apache Software Foundation Apache 1.3.12 Oracle Oracle HTTP Server 9.0.3 .1 Oracle Oracle9i Application Server 9.0.3 .1 Oracle Oracle HTTP Server 9.0.2 .3 Oracle Oracle9i Application Server 9.0.2 .3 Oracle Oracle HTTP Server 9.0.2 Oracle Oracle HTTP Server 9.0.1 Oracle Oracle HTTP Server 8.1.7 Apache Software Foundation Apache 1.3.12 Oracle Oracle8 8.1.7 Oracle Oracle8i Enterprise Edition 8.1.7 .0.0 Oracle Oracle8i Standard Edition 8.1.7 Oracle Oracle HTTP Server 1.0.2 .2 Roll up 2 Oracle Oracle HTTP Server 1.0.2 .2 Oracle Oracle HTTP Server 1.0.2 .1 Oracle Oracle HTTP Server 1.0.2 .0 Oracle HTTP Server for Server 9.2 Oracle HTTP Server for Server 9.0.1 Oracle HTTP Server for Server 8.1.7 mod_ssl mod_ssl 2.8.18 mod_ssl mod_ssl 2.8.17 mod_ssl mod_ssl 2.8.16 MandrakeSoft Linux Mandrake 10.0 MandrakeSoft Linux Mandrake 10.0 amd64 mod_ssl mod_ssl 2.8.15 MandrakeSoft Linux Mandrake 9.2 MandrakeSoft Linux Mandrake 9.2 amd64 mod_ssl mod_ssl 2.8.14 Slackware Linux 9.0 mod_ssl mod_ssl 2.8.12 MandrakeSoft Linux Mandrake 9.1 MandrakeSoft Linux Mandrake 9.1 ppc mod_ssl mod_ssl 2.8.10 Apache Software Foundation Apache 1.3.26 MandrakeSoft Corporate Server 2.1 MandrakeSoft Corporate Server 2.1 x86_64 Slackware Linux 8.1 mod_ssl mod_ssl 2.8.9 Apache Software Foundation Apache 1.3.26 Debian Linux 2.2 Debian Linux 2.2 68k Debian Linux 2.2 alpha Debian Linux 2.2 arm Debian Linux 2.2 IA32 Debian Linux 2.2 powerpc Debian Linux 2.2 sparc Debian Linux 3.0 Debian Linux 3.0 alpha Debian Linux 3.0 arm Debian Linux 3.0 hppa Debian Linux 3.0 ia32 Debian Linux 3.0 ia64 Debian Linux 3.0 m68k Debian Linux 3.0 mips Debian Linux 3.0 mipsel Debian Linux 3.0 ppc Debian Linux 3.0 s/390 Debian Linux 3.0 sparc HP Secure OS software for Linux 1.0 Slackware Linux 8.1 mod_ssl mod_ssl 2.8.8 Apache Software Foundation Apache 1.3.24 mod_ssl mod_ssl 2.8.7 Apache Software Foundation Apache 1.3.23 MandrakeSoft Multi Network Firewall 2.0 RedHat Linux 7.3 RedHat Linux 7.3 i386 mod_ssl mod_ssl 2.8.6 Apache Software Foundation Apache 1.2 Apache Software Foundation Apache 1.2.5 Apache Software Foundation Apache 1.3 Apache Software Foundation Apache 1.3.1 Apache Software Foundation Apache 1.3.3 Apache Software Foundation Apache 1.3.4 Apache Software Foundation Apache 1.3.7 dev Apache Software Foundation Apache 1.3.9 Apache Software Foundation Apache 1.3.11 Apache Software Foundation Apache 1.3.12 Apache Software Foundation Apache 1.3.14 Apache Software Foundation Apache 1.3.17 Apache Software Foundation Apache 1.3.18 Apache Software Foundation Apache 1.3.19 Apache Software Foundation Apache 1.3.20 Apache Software Foundation Apache 1.3.22 Apache Software Foundation Apache for Mac 1.3.14 Mac Apache Software Foundation Apache for Windows 1.3.6 Apache Software Foundation Apache for Windows 1.3.9 Apache Software Foundation Apache for Windows 1.3.11 Apache Software Foundation Apache for Windows 1.3.12 Apache Software Foundation Apache for Windows 1.3.13 Apache Software Foundation Apache for Windows 1.3.14 Apache Software Foundation Apache for Windows 1.3.15 Apache Software Foundation Apache for Windows 1.3.16 Apache Software Foundation Apache for Windows 1.3.17 Apache Software Foundation Apache for Windows 1.3.18 Apache Software Foundation Apache for Windows 1.3.19 Apache Software Foundation Apache for Windows 1.3.20 Compaq Compaq Secure Web Server for OpenVMS 1.0 1 Compaq Compaq Secure Web Server for OpenVMS 1.1 1 Compaq Compaq Secure Web Server for OpenVMS 1.2 Compaq Compaq Secure Web Server for Tru64 5.5.2 mod_ssl mod_ssl 2.8.5 2 Apache Software Foundation Apache 1.3.22 mod_ssl mod_ssl 2.8.5 1 Apache Software Foundation Apache 1.3.22 mod_ssl mod_ssl 2.8.5 Apache Software Foundation Apache 1.2 Apache Software Foundation Apache 1.2.5 Apache Software Foundation Apache 1.3 Apache Software Foundation Apache 1.3.1 Apache Software Foundation Apache 1.3.3 Apache Software Foundation Apache 1.3.4 Apache Software Foundation Apache 1.3.7 dev Apache Software Foundation Apache 1.3.9 Apache Software Foundation Apache 1.3.11 Apache Software Foundation Apache 1.3.12 Apache Software Foundation Apache 1.3.14 Apache Software Foundation Apache 1.3.17 Apache Software Foundation Apache 1.3.18 Apache Software Foundation Apache 1.3.19 Apache Software Foundation Apache 1.3.20 Apache Software Foundation Apache 1.3.22 Apache Software Foundation Apache for Mac 1.3.14 Mac Apache Software Foundation Apache for Windows 1.3.6 Apache Software Foundation Apache for Windows 1.3.9 Apache Software Foundation Apache for Windows 1.3.11 Apache Software Foundation Apache for Windows 1.3.12 Apache Software Foundation Apache for Windows 1.3.13 Apache Software Foundation Apache for Windows 1.3.14 Apache Software Foundation Apache for Windows 1.3.15 Apache Software Foundation Apache for Windows 1.3.16 Apache Software Foundation Apache for Windows 1.3.17 Apache Software Foundation Apache for Windows 1.3.18 Apache Software Foundation Apache for Windows 1.3.19 Apache Software Foundation Apache for Windows 1.3.20 Caldera OpenLinux Server 3.1 Caldera OpenLinux Server 3.1.1 Caldera OpenLinux Workstation 3.1 Caldera OpenLinux Workstation 3.1.1 Conectiva Linux ecommerce Conectiva Linux graficas Conectiva Linux 5.0 Conectiva Linux 5.1 Conectiva Linux 6.0 Conectiva Linux 7.0 Conectiva Linux 8.0 MandrakeSoft Corporate Server 1.0.1 MandrakeSoft Linux Mandrake 7.1 MandrakeSoft Linux Mandrake 7.2 MandrakeSoft Linux Mandrake 8.0 MandrakeSoft Linux Mandrake 8.0 ppc MandrakeSoft Linux Mandrake 8.1 MandrakeSoft Linux Mandrake 8.1 ia64 RedHat Linux 7.0 RedHat Linux 7.0 alpha RedHat Linux 7.0 i386 RedHat Linux 7.1 RedHat Linux 7.1 alpha RedHat Linux 7.1 i386 RedHat Linux 7.1 ia64 RedHat Linux 7.2 RedHat Linux 7.2 i386 RedHat Linux 7.2 ia64 mod_ssl mod_ssl 2.8.4 Apache Software Foundation Apache 1.2 Apache Software Foundation Apache 1.2.5 Apache Software Foundation Apache 1.3 Apache Software Foundation Apache 1.3.1 Apache Software Foundation Apache 1.3.3 Apache Software Foundation Apache 1.3.4 Apache Software Foundation Apache 1.3.7 dev Apache Software Foundation Apache 1.3.9 Apache Software Foundation Apache 1.3.11 Apache Software Foundation Apache 1.3.12 Apache Software Foundation Apache 1.3.14 Apache Software Foundation Apache 1.3.17 Apache Software Foundation Apache 1.3.18 Apache Software Foundation Apache 1.3.19 Apache Software Foundation Apache 1.3.20 Apache Software Foundation Apache 1.3.22 Apache Software Foundation Apache for Mac 1.3.14 Mac Apache Software Foundation Apache for Windows 1.3.6 Apache Software Foundation Apache for Windows 1.3.9 Apache Software Foundation Apache for Windows 1.3.11 Apache Software Foundation Apache for Windows 1.3.12 Apache Software Foundation Apache for Windows 1.3.13 Apache Software Foundation Apache for Windows 1.3.14 Apache Software Foundation Apache for Windows 1.3.15 Apache Software Foundation Apache for Windows 1.3.16 Apache Software Foundation Apache for Windows 1.3.17 Apache Software Foundation Apache for Windows 1.3.18 Apache Software Foundation Apache for Windows 1.3.19 Apache Software Foundation Apache for Windows 1.3.20 MandrakeSoft Single Network Firewall 7.2 Slackware Linux 8.1 mod_ssl mod_ssl 2.8.3 Apache Software Foundation Apache 1.2 Apache Software Foundation Apache 1.2.5 Apache Software Foundation Apache 1.3 Apache Software Foundation Apache 1.3.1 Apache Software Foundation Apache 1.3.3 Apache Software Foundation Apache 1.3.4 Apache Software Foundation Apache 1.3.7 dev Apache Software Foundation Apache 1.3.9 Apache Software Foundation Apache 1.3.11 Apache Software Foundation Apache 1.3.12 Apache Software Foundation Apache 1.3.14 Apache Software Foundation Apache 1.3.17 Apache Software Foundation Apache 1.3.18 Apache Software Foundation Apache 1.3.19 Apache Software Foundation Apache 1.3.20 Apache Software Foundation Apache 1.3.22 Apache Software Foundation Apache for Mac 1.3.14 Mac Apache Software Foundation Apache for Windows 1.3.6 Apache Software Foundation Apache for Windows 1.3.9 Apache Software Foundation Apache for Windows 1.3.11 Apache Software Foundation Apache for Windows 1.3.12 Apache Software Foundation Apache for Windows 1.3.13 Apache Software Foundation Apache for Windows 1.3.14 Apache Software Foundation Apache for Windows 1.3.15 Apache Software Foundation Apache for Windows 1.3.16 Apache Software Foundation Apache for Windows 1.3.17 Apache Software Foundation Apache for Windows 1.3.18 Apache Software Foundation Apache for Windows 1.3.19 Apache Software Foundation Apache for Windows 1.3.20 mod_ssl mod_ssl 2.8.2 Apache Software Foundation Apache 1.2 Apache Software Foundation Apache 1.2.5 Apache Software Foundation Apache 1.3 Apache Software Foundation Apache 1.3.1 Apache Software Foundation Apache 1.3.3 Apache Software Foundation Apache 1.3.4 Apache Software Foundation Apache 1.3.7 dev Apache Software Foundation Apache 1.3.9 Apache Software Foundation Apache 1.3.11 Apache Software Foundation Apache 1.3.12 Apache Software Foundation Apache 1.3.14 Apache Software Foundation Apache 1.3.17 Apache Software Foundation Apache 1.3.18 Apache Software Foundation Apache 1.3.19 Apache Software Foundation Apache 1.3.20 Apache Software Foundation Apache 1.3.22 Apache Software Foundation Apache for Mac 1.3.14 Mac Apache Software Foundation Apache for Windows 1.3.6 Apache Software Foundation Apache for Windows 1.3.9 Apache Software Foundation Apache for Windows 1.3.11 Apache Software Foundation Apache for Windows 1.3.12 Apache Software Foundation Apache for Windows 1.3.13 Apache Software Foundation Apache for Windows 1.3.14 Apache Software Foundation Apache for Windows 1.3.15 Apache Software Foundation Apache for Windows 1.3.16 Apache Software Foundation Apache for Windows 1.3.17 Apache Software Foundation Apache for Windows 1.3.18 Apache Software Foundation Apache for Windows 1.3.19 Apache Software Foundation Apache for Windows 1.3.20 mod_ssl mod_ssl 2.8.1 2 Apache Software Foundation Apache 1.3.19 mod_ssl mod_ssl 2.8.1 Apache Software Foundation Apache 1.2 Apache Software Foundation Apache 1.2.5 Apache Software Foundation Apache 1.3 Apache Software Foundation Apache 1.3.1 Apache Software Foundation Apache 1.3.3 Apache Software Foundation Apache 1.3.4 Apache Software Foundation Apache 1.3.7 dev Apache Software Foundation Apache 1.3.9 Apache Software Foundation Apache 1.3.11 Apache Software Foundation Apache 1.3.12 Apache Software Foundation Apache 1.3.14 Apache Software Foundation Apache 1.3.17 Apache Software Foundation Apache 1.3.18 Apache Software Foundation Apache 1.3.19 Apache Software Foundation Apache 1.3.20 Apache Software Foundation Apache 1.3.22 Apache Software Foundation Apache for Mac 1.3.14 Mac Apache Software Foundation Apache for Windows 1.3.6 Apache Software Foundation Apache for Windows 1.3.9 Apache Software Foundation Apache for Windows 1.3.11 Apache Software Foundation Apache for Windows 1.3.12 Apache Software Foundation Apache for Windows 1.3.13 Apache Software Foundation Apache for Windows 1.3.14 Apache Software Foundation Apache for Windows 1.3.15 Apache Software Foundation Apache for Windows 1.3.16 Apache Software Foundation Apache for Windows 1.3.17 Apache Software Foundation Apache for Windows 1.3.18 Apache Software Foundation Apache for Windows 1.3.19 Apache Software Foundation Apache for Windows 1.3.20 RedHat Secure Web Server 3.2 i386 mod_ssl mod_ssl 2.8 .0 Apache Software Foundation Apache 1.2 Apache Software Foundation Apache 1.2.5 Apache Software Foundation Apache 1.3 Apache Software Foundation Apache 1.3.1 Apache Software Foundation Apache 1.3.3 Apache Software Foundation Apache 1.3.4 Apache Software Foundation Apache 1.3.7 dev Apache Software Foundation Apache 1.3.9 Apache Software Foundation Apache 1.3.11 Apache Software Foundation Apache 1.3.12 Apache Software Foundation Apache 1.3.14 Apache Software Foundation Apache 1.3.17 Apache Software Foundation Apache 1.3.18 Apache Software Foundation Apache 1.3.19 Apache Software Foundation Apache 1.3.20 Apache Software Foundation Apache 1.3.22 Apache Software Foundation Apache for Mac 1.3.14 Mac Apache Software Foundation Apache for Windows 1.3.6 Apache Software Foundation Apache for Windows 1.3.9 Apache Software Foundation Apache for Windows 1.3.11 Apache Software Foundation Apache for Windows 1.3.12 Apache Software Foundation Apache for Windows 1.3.13 Apache Software Foundation Apache for Windows 1.3.14 Apache Software Foundation Apache for Windows 1.3.15 Apache Software Foundation Apache for Windows 1.3.16 Apache Software Foundation Apache for Windows 1.3.17 Apache Software Foundation Apache for Windows 1.3.18 Apache Software Foundation Apache for Windows 1.3.19 Apache Software Foundation Apache for Windows 1.3.20 mod_ssl mod_ssl 2.7.1 Apache Software Foundation Apache 1.2 Apache Software Foundation Apache 1.2.5 Apache Software Foundation Apache 1.3 Apache Software Foundation Apache 1.3.1 Apache Software Foundation Apache 1.3.3 Apache Software Foundation Apache 1.3.4 Apache Software Foundation Apache 1.3.9 Apache Software Foundation Apache 1.3.11 Apache Software Foundation Apache 1.3.12 Apache Software Foundation Apache 1.3.14 Apache Software Foundation Apache 1.3.17 Apache Software Foundation Apache 1.3.18 Apache Software Foundation Apache 1.3.19 Apache Software Foundation Apache 1.3.20 Apache Software Foundation Apache 1.3.22 EnGarde Secure Linux 1.0.1 mod_ssl mod_ssl 2.7 .0 Apache Software Foundation Apache 1.3.14 mod_ssl mod_ssl 2.6.6 Apache Software Foundation Apache 1.3.12 mod_ssl mod_ssl 2.6.5 Apache Software Foundation Apache 1.3.12 mod_ssl mod_ssl 2.6.4 Apache Software Foundation Apache 1.3.12 mod_ssl mod_ssl 2.6.3 Apache Software Foundation Apache 1.3.12 mod_ssl mod_ssl 2.6.2 Apache Software Foundation Apache 1.3.12 mod_ssl mod_ssl 2.6.1 Apache Software Foundation Apache 1.3.12 mod_ssl mod_ssl 2.6 .0 Apache Software Foundation Apache 1.3.12 mod_ssl mod_ssl 2.5.1 Apache Software Foundation Apache 1.3.11 mod_ssl mod_ssl 2.5 .0 Apache Software Foundation Apache 1.3.11 mod_ssl mod_ssl 2.4.10 Apache Software Foundation Apache 1.2 Apache Software Foundation Apache 1.2.5 Apache Software Foundation Apache 1.3 Apache Software Foundation Apache 1.3.1 Apache Software Foundation Apache 1.3.3 Apache Software Foundation Apache 1.3.4 Apache Software Foundation Apache 1.3.9 Apache Software Foundation Apache 1.3.11 Apache Software Foundation Apache 1.3.12 Apache Software Foundation Apache 1.3.14 Apache Software Foundation Apache 1.3.17 Apache Software Foundation Apache 1.3.18 Apache Software Foundation Apache 1.3.19 Apache Software Foundation Apache 1.3.20 Apache Software Foundation Apache 1.3.22 mod_ssl mod_ssl 2.4.9 Apache Software Foundation Apache 1.3.9 mod_ssl mod_ssl 2.4.8 Apache Software Foundation Apache 1.3.9 mod_ssl mod_ssl 2.4.7 Apache Software Foundation Apache 1.3.9 mod_ssl mod_ssl 2.4.6 Apache Software Foundation Apache 1.3.9 mod_ssl mod_ssl 2.4.5 Apache Software Foundation Apache 1.3.9 mod_ssl mod_ssl 2.4.4 Apache Software Foundation Apache 1.3.9 mod_ssl mod_ssl 2.4.3 Apache Software Foundation Apache 1.3.9 mod_ssl mod_ssl 2.4.2 Apache Software Foundation Apache 1.3.9 mod_ssl mod_ssl 2.4.1 Apache Software Foundation Apache 1.3.9 mod_ssl mod_ssl 2.4 .10 Apache Software Foundation Apache 1.3.9 Debian Linux 2.2 Debian Linux 2.2 68k Debian Linux 2.2 alpha Debian Linux 2.2 arm Debian Linux 2.2 IA32 Debian Linux 2.2 powerpc Debian Linux 2.2 sparc mod_ssl mod_ssl 2.4 .0 Apache Software Foundation Apache 1.3.9 mod_ssl mod_ssl 2.3.11 Apache Software Foundation Apache 1.3.6 HP Webproxy A.02.10 HP HPUX B.11.04 HP Webproxy A.02.00 HP HPUX B.11.04 HP VirtualVault A.04.70 HP HPUX B.11.04 HP VirtualVault A.04.60 HP HPUX B.11.04 HP VirtualVault A.04.50 HP HPUX B.11.04 HP HPUX 11.22 HP HPUX 11.20 HP HPUX 11.11 HP HPUX 11.0 4 HP HPUX 11.0 HP HPUX B.11.22 HP HPUX B.11.11 HP HPUX B.11.00 Gentoo Linux 1.4 Conectiva Linux 8.0
Not Vulnerable	mod_ssl mod_ssl 2.8.19 MandrakeSoft Linux Mandrake 10.1 MandrakeSoft Linux Mandrake 10.1 x86_64
Code	Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: content@securitydot.net <mailto:content@securitydot.net>.
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-17 Mozilla Firefox and SeaMonkey Theora Video Library Remote Integer Overflow Vulnerability
2009-12-17 Mozilla Firefox and Sea Monkey Insecure Protocol Location Bar Spoofing Vulnerability
2009-12-17 Mozilla Firefox and Sea Monkey Content Injection Spoofing Vulnerability
2009-12-17 Mozilla Firefox/SeaMonkey GeckoActiveXObject Exception Message COM Object Enumeration Vulnerability
2009-12-16 ZABBIX Denial Of Service and SQL Injection Vulnerabilities
2009-12-16 IBM WebSphere Application Server JNDI Remote Information Disclosure Vulnerability
2009-12-16 Horde Application Framework Administration Interface Cross-Site Scripting Vulnerability
2009-12-16 Mozilla Firefox and SeaMonkey MFSA 2009-65 through -71 Multiple Vulnerabilities
2009-12-16 Merkaartor Insecure Temporary File Creation Vulnerability
2009-12-15 TYPO3 Watchdog (aba_watchdog) Unspecified Information Disclosure Vulnerability