CVEDB API

Vulnerability Details CVE-2004-0940

Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as the apache user via SSI (XSSI) documents that trigger a length calculation error.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.057

EPSS Ranking 90.1%

CVSS Severity

CVSS v3 Score 7.8

CVSS v2 Score 6.9

References

Products affected by CVE-2004-0940

Apache » Http Server » Version: 1.3

cpe:2.3:a:apache:http_server:1.3
Apache » Http Server » Version: 1.3.0

cpe:2.3:a:apache:http_server:1.3.0
Apache » Http Server » Version: 1.3.1

cpe:2.3:a:apache:http_server:1.3.1
Apache » Http Server » Version: 1.3.1.1

cpe:2.3:a:apache:http_server:1.3.1.1
Apache » Http Server » Version: 1.3.10

cpe:2.3:a:apache:http_server:1.3.10
Apache » Http Server » Version: 1.3.11

cpe:2.3:a:apache:http_server:1.3.11
Apache » Http Server » Version: 1.3.12

cpe:2.3:a:apache:http_server:1.3.12
Apache » Http Server » Version: 1.3.13

cpe:2.3:a:apache:http_server:1.3.13
Apache » Http Server » Version: 1.3.14

cpe:2.3:a:apache:http_server:1.3.14
Apache » Http Server » Version: 1.3.15

cpe:2.3:a:apache:http_server:1.3.15
Apache » Http Server » Version: 1.3.16

cpe:2.3:a:apache:http_server:1.3.16
Apache » Http Server » Version: 1.3.17

cpe:2.3:a:apache:http_server:1.3.17
Apache » Http Server » Version: 1.3.18

cpe:2.3:a:apache:http_server:1.3.18
Apache » Http Server » Version: 1.3.19

cpe:2.3:a:apache:http_server:1.3.19
Apache » Http Server » Version: 1.3.2

cpe:2.3:a:apache:http_server:1.3.2
Apache » Http Server » Version: 1.3.20

cpe:2.3:a:apache:http_server:1.3.20
Apache » Http Server » Version: 1.3.22

cpe:2.3:a:apache:http_server:1.3.22
Apache » Http Server » Version: 1.3.23

cpe:2.3:a:apache:http_server:1.3.23
Apache » Http Server » Version: 1.3.24

cpe:2.3:a:apache:http_server:1.3.24
Apache » Http Server » Version: 1.3.25

cpe:2.3:a:apache:http_server:1.3.25
Apache » Http Server » Version: 1.3.26

cpe:2.3:a:apache:http_server:1.3.26
Apache » Http Server » Version: 1.3.27

cpe:2.3:a:apache:http_server:1.3.27
Apache » Http Server » Version: 1.3.28

cpe:2.3:a:apache:http_server:1.3.28
Apache » Http Server » Version: 1.3.29

cpe:2.3:a:apache:http_server:1.3.29
Apache » Http Server » Version: 1.3.3

cpe:2.3:a:apache:http_server:1.3.3
Apache » Http Server » Version: 1.3.30

cpe:2.3:a:apache:http_server:1.3.30
Apache » Http Server » Version: 1.3.31

cpe:2.3:a:apache:http_server:1.3.31
Apache » Http Server » Version: 1.3.32

cpe:2.3:a:apache:http_server:1.3.32
Apache » Http Server » Version: 1.3.4

cpe:2.3:a:apache:http_server:1.3.4
Apache » Http Server » Version: 1.3.5

cpe:2.3:a:apache:http_server:1.3.5
Apache » Http Server » Version: 1.3.6

cpe:2.3:a:apache:http_server:1.3.6
Apache » Http Server » Version: 1.3.7

cpe:2.3:a:apache:http_server:1.3.7
Apache » Http Server » Version: 1.3.8

cpe:2.3:a:apache:http_server:1.3.8
Apache » Http Server » Version: 1.3.9

cpe:2.3:a:apache:http_server:1.3.9
Openpkg » Openpkg » Version: 2.0

cpe:2.3:a:openpkg:openpkg:2.0
Openpkg » Openpkg » Version: 2.1

cpe:2.3:a:openpkg:openpkg:2.1
Openpkg » Openpkg » Version: 2.2

cpe:2.3:a:openpkg:openpkg:2.2
Hp » Hp-Ux » Version: 11.00

cpe:2.3:o:hp:hp-ux:11.00
Hp » Hp-Ux » Version: 11.11

cpe:2.3:o:hp:hp-ux:11.11
Hp » Hp-Ux » Version: 11.20

cpe:2.3:o:hp:hp-ux:11.20
Hp » Hp-Ux » Version: 11.22

cpe:2.3:o:hp:hp-ux:11.22
Slackware » Slackware Linux » Version: 10.0

cpe:2.3:o:slackware:slackware_linux:10.0
Slackware » Slackware Linux » Version: 8.0

cpe:2.3:o:slackware:slackware_linux:8.0
Slackware » Slackware Linux » Version: 8.1

cpe:2.3:o:slackware:slackware_linux:8.1
Slackware » Slackware Linux » Version: 9.0

cpe:2.3:o:slackware:slackware_linux:9.0
Slackware » Slackware Linux » Version: 9.1

cpe:2.3:o:slackware:slackware_linux:9.1
Slackware » Slackware Linux » Version: current

cpe:2.3:o:slackware:slackware_linux:current
Suse » Suse Linux » Version: 8.0

cpe:2.3:o:suse:suse_linux:8.0
Suse » Suse Linux » Version: 8.1

cpe:2.3:o:suse:suse_linux:8.1
Suse » Suse Linux » Version: 8.2

cpe:2.3:o:suse:suse_linux:8.2
Suse » Suse Linux » Version: 9.0

cpe:2.3:o:suse:suse_linux:9.0
Suse » Suse Linux » Version: 9.1

cpe:2.3:o:suse:suse_linux:9.1
Suse » Suse Linux » Version: 9.2

cpe:2.3:o:suse:suse_linux:9.2
Trustix » Secure Linux » Version: 1.5

cpe:2.3:o:trustix:secure_linux:1.5

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2004-0940

Products

Pricing

Contact Us