// For flags

CVE-2004-0488

mod_ssl ssl_util_uuencode_binary CA issue

Severity Score

9.8
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN.

Desbordamiento de búfer basado en la pila en la función ssl_util_uuencode_binary en ssl_util.c de mod_ssl de Apache cuando se configura mod_ssl para que confie en la Autoridad Certificadora emisora, puede permitir a atacantes remotos ejecutar código arbitrario mediante un certificado de cliente con un DN de asunto grande.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2004-05-24 CVE Reserved
  • 2004-05-28 CVE Published
  • 2024-08-08 CVE Updated
  • 2025-04-05 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-787: Out-of-bounds Write
CAPEC
References (33)
URL Tag Source
http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021610.html Mailing List
http://marc.info/?l=bugtraq&m=108567431823750&w=2 Issue Tracking
http://marc.info/?l=bugtraq&m=108619129727620&w=2 Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/16214 Third Party Advisory
https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E Mailing List
https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E Mailing List
https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E Mailing List
https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E Mailing List
https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E Mailing List
https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E Mailing List
https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E Mailing List
https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E Mailing List
https://lists.apache.org/thread.html/raa117ef183f0da9b3f46efbeaa66f7622bd68868a450cae4fd8ed594%40%3Ccvs.httpd.apache.org%3E Mailing List
https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E Mailing List
https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E Mailing List
https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E Mailing List
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11458 Signature
URL Date SRC
URL Date SRC
http://www.securityfocus.com/bid/10355 2023-11-07
URL Date SRC
ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc 2023-11-07
http://marc.info/?l=bugtraq&m=109181600614477&w=2 2023-11-07
http://marc.info/?l=bugtraq&m=109215056218824&w=2 2023-11-07
http://rhn.redhat.com/errata/RHSA-2004-245.html 2023-11-07
http://security.gentoo.org/glsa/glsa-200406-05.xml 2023-11-07
http://www.debian.org/security/2004/dsa-532 2023-11-07
http://www.mandriva.com/security/advisories?name=MDKSA-2004:054 2023-11-07
http://www.mandriva.com/security/advisories?name=MDKSA-2004:055 2023-11-07
http://www.redhat.com/support/errata/RHSA-2004-342.html 2023-11-07
http://www.redhat.com/support/errata/RHSA-2004-405.html 2023-11-07
http://www.redhat.com/support/errata/RHSA-2005-816.html 2023-11-07
http://www.trustix.net/errata/2004/0031 2023-11-07
https://bugzilla.fedora.us/show_bug.cgi?id=1888 2023-11-07
https://access.redhat.com/security/cve/CVE-2004-0488 2008-06-30
https://bugzilla.redhat.com/show_bug.cgi?id=430867 2008-06-30
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Apache
Search vendor "Apache"
 Http Server
Search vendor "Apache" for product "Http Server"
 >= 2.0.35 < 2.0.50
Search vendor "Apache" for product "Http Server" and version " >= 2.0.35 < 2.0.50"
-
Affected
Debian
Search vendor "Debian"
 Debian Linux
Search vendor "Debian" for product "Debian Linux"
 3.0
Search vendor "Debian" for product "Debian Linux" and version "3.0"
-
Affected
Redhat
Search vendor "Redhat"
 Enterprise Linux Server
Search vendor "Redhat" for product "Enterprise Linux Server"
 2.0
Search vendor "Redhat" for product "Enterprise Linux Server" and version "2.0"
-
Affected
Redhat
Search vendor "Redhat"
 Enterprise Linux Workstation
Search vendor "Redhat" for product "Enterprise Linux Workstation"
 2.0
Search vendor "Redhat" for product "Enterprise Linux Workstation" and version "2.0"
-
Affected