Unscored severity · published Jul 27, 2004
CVE-2004-0700
Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for Apache before 1.3.31 may allow remote attackers to execute…
–
CVSS
5.8%
EPSS
No
On KEV
Description
Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for Apache before 1.3.31 may allow remote attackers to execute arbitrary messages via format string specifiers in certain log messages for HTTPS that are handled by the ssl_log function.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.8% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Linux · Gentoo
1.4 · source: NVD
MS
Mod Ssl · Mod Ssl
2.3.11; 2.4.0; 2.4.1; 2.4.2; 2.4.3; 2.4.4; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0700
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0700
distro.conectiva.com.br
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000857
marc.info
http://marc.info/?l=apache-modssl&m=109001100906749&w=2
marc.info
http://marc.info/?l=bugtraq&m=109005001205991&w=2
packetstormsecurity.org
http://packetstormsecurity.org/0407-advisories/modsslFormat.txt
virulent.siyahsapka.org
http://virulent.siyahsapka.org/
www.debian.org
http://www.debian.org/security/2004/dsa-532
More from Linux
9.8
CVE-2024-12084
Rsync: heap buffer overflow in rsync due to improper checksum length handling
7.5
CVE-2024-12087
Rsync: path traversal vulnerability in rsync
7.5
CVE-2024-12088
Rsync: --safe-links option bypass leads to path traversal
7.5
CVE-2024-12085
Rsync: info leak via uninitialized stack contents
6.8
CVE-2024-12086
Rsync: rsync server leaks arbitrary client files