exploits , vulnerabilities , articles , Apache Web Server Multiple Module Local Buffer Overflow Vulnerability

Title	Apache Web Server Multiple Module Local Buffer Overflow Vulnerability
Published	2003-10-28-12:00AM
Updated	2005-11-02-05:07PM
Class	Boundary Condition Error
CVE	CAN-2003-0542
Remote	No
Local	Yes
Credit	The disclosure of this issue has been credited to Andr? Malo.
Vulnerable	Turbolinux Turbolinux Workstation 8.0 Turbolinux Turbolinux Workstation 7.0 Turbolinux Turbolinux Workstation 6.0 Turbolinux Turbolinux Server 8.0 Turbolinux Turbolinux Server 7.0 Turbolinux Turbolinux Server 6.5 Turbolinux Turbolinux Server 6.1 Turbolinux Turbolinux Advanced Server 6.0 Turbolinux Appliance Server Workgroup Edition 1.0 Turbolinux Appliance Server Hosting Edition 1.0 Sun Solaris 9.0 _x86 Sun Solaris 9.0 Sun Solaris 8.0 _x86 Sun Solaris 8.0 Sun Cobalt RaQ XTR Slackware Linux 9.1 Slackware Linux 9.0 Slackware Linux 8.1 Slackware Linux current SGI ProPack 2.4 SGI ProPack 2.3 SCO Unixware 7.1.3 SCO Unixware 7.1.1 SCO Open UNIX 8.0 RedHat Stronghold 4.0 RedHat Fedora Core1 IBM HTTP Server 2.0.47 IBM HTTP Server 2.0.42 .2 IBM HTTP Server 1.3.19 HP HPUX 11.0 IBM AIX 4.3.3 Microsoft Windows NT 4.0 SP4 Microsoft Windows NT 4.0 SP5 Microsoft Windows NT 4.0 SP6a RedHat Linux 7.1 S.u.S.E. Linux 7.1 Sun Solaris 2.6 Sun Solaris 7.0 HP Webproxy 2.1 HP HPUX 11.0 4 HP Webproxy 2.0 HP HPUX 11.0 4 HP VirtualVault 4.7 HP HPUX 11.0 4 HP VirtualVault 4.6 HP HPUX 11.0 4 HP VirtualVault 4.5 HP HPUX 11.0 4 HP HPUX 11.22 HP HPUX 11.20 HP HPUX 11.11 HP HPUX 11.0 HP HPUX B.11.22 HP HPUX B.11.11 HP HPUX B.11.00 Apache Software Foundation Apache 2.0.47 Apple Mac OS X Server 10.1 Apple Mac OS X Server 10.1.1 Apple Mac OS X Server 10.1.2 Apple Mac OS X Server 10.1.3 Apple Mac OS X Server 10.1.4 Apple Mac OS X Server 10.1.5 Apple Mac OS X Server 10.2 Apple Mac OS X Server 10.2.1 Apple Mac OS X Server 10.2.2 Apple Mac OS X Server 10.2.3 Apple Mac OS X Server 10.2.4 Apple Mac OS X Server 10.2.5 Apple Mac OS X Server 10.2.6 Apple Mac OS X Server 10.2.7 Apple Mac OS X Server 10.2.8 Apple Mac OS X Server 10.3 Apple Mac OS X Server 10.3.1 Apple Mac OS X Server 10.3.2 Apple Mac OS X Server 10.3.3 Apple Mac OS X Server 10.3.4 Apple Mac OS X Server 10.3.5 MandrakeSoft Linux Mandrake 9.1 MandrakeSoft Linux Mandrake 9.1 ppc MandrakeSoft Linux Mandrake 9.2 MandrakeSoft Linux Mandrake 9.2 amd64 Apache Software Foundation Apache 2.0.46 RedHat Desktop 3.0 RedHat Enterprise Linux AS 3 RedHat Enterprise Linux ES 3 RedHat Enterprise Linux WS 3 Trustix Secure Linux 2.0 Apache Software Foundation Apache 2.0.45 Apple Mac OS X 10.0 Apple Mac OS X 10.0.1 Apple Mac OS X 10.0.2 Apple Mac OS X 10.0.3 Apple Mac OS X 10.0.4 Apple Mac OS X 10.1 Apple Mac OS X 10.1 Apple Mac OS X 10.1.1 Apple Mac OS X 10.1.2 Apple Mac OS X 10.1.3 Apple Mac OS X 10.1.4 Apple Mac OS X 10.1.5 Apple Mac OS X 10.2 Apple Mac OS X 10.2.1 Apple Mac OS X 10.2.2 Apple Mac OS X 10.2.3 Apple Mac OS X 10.2.4 Apple Mac OS X 10.2.5 Apple Mac OS X 10.2.6 Conectiva Linux 9.0 Apache Software Foundation Apache 2.0.44 Apache Software Foundation Apache 2.0.43 Apache Software Foundation Apache 2.0.42 Gentoo Linux 1.2 Gentoo Linux 1.4 _rc1 Apache Software Foundation Apache 2.0.41 Apache Software Foundation Apache 2.0.40 RedHat Linux 8.0 RedHat Linux 9.0 i386 Terra Soft Solutions Yellow Dog Linux 3.0 Apache Software Foundation Apache 2.0.39 Apache Software Foundation Apache 2.0.38 Apache Software Foundation Apache 2.0.37 Apache Software Foundation Apache 2.0.36 Apache Software Foundation Apache 2.0.35 Apache Software Foundation Apache 2.0.32 Apache Software Foundation Apache 2.0.28 Apache Software Foundation Apache 2.0 Apache Software Foundation Apache 1.3.28 Conectiva Linux 8.0 MandrakeSoft Linux Mandrake 9.2 MandrakeSoft Linux Mandrake 9.2 amd64 OpenBSD OpenBSD 3.4 OpenPKG OpenPKG 1.3 Apache Software Foundation Apache 1.3.27 HP HPUX (VVOS) 11.0 4 HP VirtualVault 4.5 HP VirtualVault 4.6 HP Webproxy 2.0 Immunix Immunix OS 7 MandrakeSoft Linux Mandrake 9.1 MandrakeSoft Linux Mandrake 9.1 ppc OpenBSD OpenBSD 3.3 OpenPKG OpenPKG Current RedHat Enterprise Linux AS 2.1 RedHat Enterprise Linux AS 2.1 IA64 RedHat Enterprise Linux ES 2.1 RedHat Enterprise Linux ES 2.1 IA64 RedHat Enterprise Linux WS 2.1 RedHat Enterprise Linux WS 2.1 IA64 RedHat Linux Advanced Work Station 2.1 SGI IRIX 6.5.19 Apache Software Foundation Apache 1.3.26 Conectiva Linux 6.0 Conectiva Linux 7.0 Conectiva Linux 8.0 Debian Linux 3.0 alpha Debian Linux 3.0 arm Debian Linux 3.0 hppa Debian Linux 3.0 ia32 Debian Linux 3.0 ia64 Debian Linux 3.0 m68k Debian Linux 3.0 mips Debian Linux 3.0 mipsel Debian Linux 3.0 ppc Debian Linux 3.0 s/390 Debian Linux 3.0 sparc MandrakeSoft Corporate Server 2.1 MandrakeSoft Corporate Server 2.1 x86_64 MandrakeSoft Linux Mandrake 9.0 OpenPKG OpenPKG 1.1 Trustix Secure Linux 1.1 Trustix Secure Linux 1.2 Trustix Secure Linux 1.5 Apache Software Foundation Apache 1.3.25 Apache Software Foundation Apache 1.3.24 OpenBSD OpenBSD 3.1 Oracle Oracle HTTP Server 9.0.1 Oracle Oracle HTTP Server 9.2 .0 Oracle Oracle9i Application Server 1.0.2 Oracle Oracle9i Application Server 1.0.2 .1s Oracle Oracle9i Application Server 1.0.2 .2 Oracle Oracle9i Application Server 9.0.2 Slackware Linux 8.1 Unisphere Networks SDX300 2.0.3 Apache Software Foundation Apache 1.3.23 IBM AIX 4.3 MandrakeSoft Linux Mandrake 8.2 MandrakeSoft Linux Mandrake 8.2 ppc RedHat Linux 7.3 RedHat Linux 7.3 i386 S.u.S.E. Linux 8.0 S.u.S.E. Linux 8.0 i386 Trustix Secure Linux 1.1 Trustix Secure Linux 1.2 Trustix Secure Linux 1.5 Apache Software Foundation Apache 1.3.22 Caldera OpenLinux Server 3.1 Caldera OpenLinux Server 3.1.1 Caldera OpenLinux Workstation 3.1 Caldera OpenLinux Workstation 3.1.1 Conectiva Linux 6.0 Conectiva Linux 7.0 Conectiva Linux 8.0 MandrakeSoft Corporate Server 1.0.1 MandrakeSoft Linux Mandrake 7.2 MandrakeSoft Linux Mandrake 8.0 MandrakeSoft Linux Mandrake 8.0 ppc MandrakeSoft Linux Mandrake 8.1 MandrakeSoft Linux Mandrake 8.1 ia64 OpenPKG OpenPKG 1.0 RedHat Linux 6.2 alpha RedHat Linux 6.2 i386 RedHat Linux 6.2 sparc RedHat Linux 7.0 alpha RedHat Linux 7.0 i386 RedHat Linux 7.1 alpha RedHat Linux 7.1 i386 RedHat Linux 7.1 ia64 RedHat Linux 7.2 i386 RedHat Linux 7.2 ia64 Apache Software Foundation Apache 1.3.20 HP HPUX 11.20 HP HPUX 11.22 MandrakeSoft Single Network Firewall 7.2 S.u.S.E. Linux 7.3 S.u.S.E. Linux 7.3 i386 S.u.S.E. Linux 7.3 ppc S.u.S.E. Linux 7.3 sparc SGI IRIX 6.5.12 SGI IRIX 6.5.12 f SGI IRIX 6.5.12 m SGI IRIX 6.5.13 SGI IRIX 6.5.13 f SGI IRIX 6.5.13 m SGI IRIX 6.5.14 SGI IRIX 6.5.14 f SGI IRIX 6.5.14 m SGI IRIX 6.5.15 SGI IRIX 6.5.16 SGI IRIX 6.5.17 SGI IRIX 6.5.18 Slackware Linux 8.0 Sun Cobalt Control Station 4100CS Sun Cobalt RaQ 550 Sun Solaris 9.0 Sun Solaris 9.0 _x86 Sun Solaris 9.0 _x86 Update 2 Sun SunOS 5.9 Sun SunOS 5.9 _x86 Apache Software Foundation Apache 1.3.19 Apple Mac OS X 10.0.3 Caldera OpenLinux 2.4 Debian Linux 2.3 Digital (Compaq) TRU64/DIGITAL UNIX 4.0 f Digital (Compaq) TRU64/DIGITAL UNIX 4.0 g Digital (Compaq) TRU64/DIGITAL UNIX 5.0 EnGarde Secure Linux 1.0.1 FreeBSD FreeBSD 3.5.1 FreeBSD FreeBSD 4.2 HP HPUX 10.20 HP HPUX 11.0 HP HPUX 11.0 4 HP HPUX 11.11 HP Secure OS software for Linux 1.0 HP VirtualVault 4.5 MandrakeSoft Linux Mandrake 7.1 MandrakeSoft Linux Mandrake 7.2 MandrakeSoft Linux Mandrake 8.0 MandrakeSoft Linux Mandrake 8.1 NetBSD NetBSD 1.5 NetBSD NetBSD 1.5.1 OpenBSD OpenBSD 2.8 OpenBSD OpenBSD 2.9 OpenBSD OpenBSD 3.0 RedHat Linux 6.2 RedHat Linux 7.0 RedHat Linux 7.1 S.u.S.E. Linux 6.4 S.u.S.E. Linux 6.4 alpha S.u.S.E. Linux 6.4 i386 S.u.S.E. Linux 6.4 ppc S.u.S.E. Linux 7.0 S.u.S.E. Linux 7.0 alpha S.u.S.E. Linux 7.0 i386 S.u.S.E. Linux 7.0 ppc S.u.S.E. Linux 7.0 sparc S.u.S.E. Linux 7.1 S.u.S.E. Linux 7.1 alpha S.u.S.E. Linux 7.1 ppc S.u.S.E. Linux 7.1 sparc S.u.S.E. Linux 7.1 x86 S.u.S.E. Linux 7.2 S.u.S.E. Linux 7.2 i386 SCO eDesktop 2.4 SCO eServer 2.3.1 SGI IRIX 6.5.8 SGI IRIX 6.5.9 Sun Solaris 7.0 Sun Solaris 8.0 Apache Software Foundation Apache 1.3.18 Apache Software Foundation Apache 1.3.17 MandrakeSoft Corporate Server 1.0.1 MandrakeSoft Linux Mandrake 8.0 MandrakeSoft Linux Mandrake 8.0 ppc OpenBSD OpenBSD 2.8 S.u.S.E. Linux 7.1 Apache Software Foundation Apache 1.3.14 EnGarde Secure Linux 1.0.1 MandrakeSoft Linux Mandrake 7.1 MandrakeSoft Linux Mandrake 7.2 MandrakeSoft Single Network Firewall 7.2 SGI IRIX 6.5 SGI IRIX 6.5.1 SGI IRIX 6.5.2 SGI IRIX 6.5.3 SGI IRIX 6.5.4 SGI IRIX 6.5.5 SGI IRIX 6.5.6 SGI IRIX 6.5.7 SGI IRIX 6.5.8 SGI IRIX 6.5.9 SGI IRIX 6.5.10 SGI IRIX 6.5.11 Apache Software Foundation Apache 1.3.12 NetScreen NetScreenGlobal PRO Express Policy Manager Server NetScreen NetScreenGlobal PRO Policy Manager Server OpenBSD OpenBSD 2.8 RedHat Linux 6.2 alpha RedHat Linux 6.2 i386 RedHat Linux 6.2 sparc RedHat Linux 7.0 alpha RedHat Linux 7.0 i386 S.u.S.E. Linux 7.0 S.u.S.E. Linux 7.0 sparc Sun Cobalt ManageRaQ v2 3599BD Sun Cobalt Qube3 4000WG Sun Cobalt RaQ XTR 3500R Sun Cobalt RaQ4 3001R Apache Software Foundation Apache 1.3.11 Apache Software Foundation Apache 1.3.9 Debian Linux 2.2 Debian Linux 2.2 68k Debian Linux 2.2 alpha Debian Linux 2.2 arm Debian Linux 2.2 powerpc Debian Linux 2.2 sparc NetScreen NetScreenGlobal PRO Express Policy Manager Server NetScreen NetScreenGlobal PRO Policy Manager Server Sun Solaris 8.0 Sun Solaris 8.0 _x86 Sun SunOS 5.8 Sun SunOS 5.8 _x86 Apache Software Foundation Apache 1.3.6 Sun Cobalt ManageRaQ3 3000Rmr Sun Cobalt RaQ3 3000R Sun Cobalt Velociraptor Apache Software Foundation Apache 1.3.4 BSDI BSD/OS 4.0 Apache Software Foundation Apache 1.3.3 RedHat Linux 5.2 alpha RedHat Linux 5.2 i386 RedHat Linux 5.2 sparc Apache Software Foundation Apache 1.3.1 Apache Software Foundation Apache 1.3 Apple Mac OS X 10.1 Apple Mac OS X 10.1.1 Apple Mac OS X 10.1.2 Apple Mac OS X 10.1.3 Apple Mac OS X 10.1.4 Apple Mac OS X 10.1.5 Apple Mac OS X 10.2 Apple Mac OS X 10.2.1 Apple Mac OS X 10.2.2 Apple Mac OS X 10.2.3 Apple Mac OS X 10.2.4 Apple Mac OS X 10.2.5 Apple Mac OS X 10.2.6 Apple Mac OS X 10.2.7 Apple Mac OS X 10.2.8 Apple Mac OS X 10.3 Apple Mac OS X 10.3.1 Apple Mac OS X 10.3.2 Apple Mac OS X Server 10.1 Apple Mac OS X Server 10.1.1 Apple Mac OS X Server 10.1.2 Apple Mac OS X Server 10.1.3 Apple Mac OS X Server 10.1.4 Apple Mac OS X Server 10.1.5 Apple Mac OS X Server 10.2 Apple Mac OS X Server 10.2.1 Apple Mac OS X Server 10.2.2 Apple Mac OS X Server 10.2.3 Apple Mac OS X Server 10.2.4 Apple Mac OS X Server 10.2.5 Apple Mac OS X Server 10.2.6 Apple Mac OS X Server 10.2.7 Apple Mac OS X Server 10.2.8 Apple Mac OS X Server 10.3 Apple Mac OS X Server 10.3.1 Apple Mac OS X Server 10.3.2 Microsoft Windows 2000 Professional Microsoft Windows NT 4.0
Not Vulnerable	Apache Software Foundation Apache 2.0.48 MandrakeSoft Linux Mandrake 10.0 MandrakeSoft Linux Mandrake 10.0 amd64 S.u.S.E. Linux 8.1 S.u.S.E. Linux Personal 8.2 S.u.S.E. Linux Personal 9.0 S.u.S.E. Linux Personal 9.0 x86_64 Trustix Secure Linux 2.0 Trustix Secure Linux 2.1 Apache Software Foundation Apache 1.3.29 Apple Mac OS X 10.2.7 Apple Mac OS X 10.3.5 Apple Mac OS X Server 10.2.7 Apple Mac OS X Server 10.3.5 MandrakeSoft Linux Mandrake 10.0 MandrakeSoft Linux Mandrake 10.0 amd64 OpenPKG OpenPKG 2.0
Code	Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: content@securitydot.net <mailto:content@securitydot.net>.
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-14 Microsoft Protected Extensible Authentication Protocol Authentication Bypass Vulnerability
2009-12-14 Google Chrome DNS Pre-Fetching Proxy Cache Information Disclosure Vulnerability
2009-12-14 Oracle E-Business Suite Multiple Remote Vulnerabilities
2009-12-14 MySQL Multiple Remote Denial Of Service Vulnerabilities
2009-12-14 Digital Scribe Multiple SQL Injection Vulnerabilities
2009-12-14 Microsoft WordPad and Office Text Converters Word 97 File Parsing Memory Corruption Vulnerability
2009-12-14 Microsoft Protected Extensible Authentication Protocol Memory Corruption Vulnerability
2009-12-14 WebKit Web Inspector Cross Site Scripting Vulnerability
2009-12-11 Symantec Veritas VRTSweb Incoming Data Remote Code Execution Vulnerability
2009-12-11 HP OpenView Network Node Manager Perl CGI Executables Remote Code Execution Vulnerability