apache2: stack-based buffer overflow in ssl

Package(s):

apache2

CVE #(s):

CAN-2004-0488

Created:

June 1, 2004

Updated:

October 14, 2004

Description:

A stack-based buffer overflow exists in the ssl_util_uuencode_binary function in ssl_util.c in Apache. When mod_ssl is configured to trust the issuing CA, a remote attacker may be able to execute arbitrary code via a client certificate with a long subject DN.

Alerts:

Fedora-Legacy	FLSA:1888	2004-10-13
Debian	DSA-532-2	2004-07-27
Debian	DSA-532-1	2004-07-22
Red Hat	RHSA-2004:245-01	2004-06-14
Gentoo	200406-05	2004-06-09
Slackware	SSA:2004-154-01	2004-06-02
OpenPKG	OpenPKG-SA-2004.026	2004-05-27
Trustix	TSLSA-2004-0031	2004-06-02
Mandrake	MDKSA-2004:054	2004-06-01
Mandrake	MDKSA-2004:055	2004-06-01

(Log in to post comments)

apache2: stack-based buffer overflow in ssl_util.c