Detections
Analytics
Apache < 1.3.29 Multiple Modules Local Overflow
critical Nessus Plugin ID 11915
Language:
Synopsis
The remote web server is affected by multiple local buffer overflow vulnerabilities.Description
The remote host appears to be running a version of the Apache web server which is older than 1.3.29. Such versions are reportedly affected by local buffer overflow vulnerabilities in the mod_alias and mod_rewrite modules. An attacker could exploit these vulnerabilities to execute arbitrary code in the context of the affected application.*** Note that Nessus solely relied on the version number
*** of the remote server to issue this warning. This might
*** be a false positive
Solution
Upgrade to Apache web server version 1.3.29 or later.See Also
https://www.securityfocus.com/archive/1/342674/30/0/threaded
Plugin Details
Severity: Critical
ID: 11915
File Name: apache_1_3_29.nasl
Version: 1.29
Type: remote
Family: Web Servers
Published: 11/1/2003
Updated: 11/15/2018
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: High
Base Score: 7.2
Temporal Score: 5.3
Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS v3
Risk Factor: Critical
Base Score: 9.8
Temporal Score: 8.5
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:apache:http_server
Required KB Items: installed_sw/Apache
Exploit Ease: No known exploits are available
Vulnerability Publication Date: 10/29/2003
Reference Information
CVE: CVE-2003-0542
BID: 8911