CVE-2003-0542

Published: Nov 3, 2003Modified: Apr 16, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

Multiple stack-based buffer overflows in (1) mod_alias and (2) mod_rewrite for Apache before 1.3.29 allow attackers to create configuration files to cause a denial of service (crash) or execute arbitrary code via a regular expression with more than 9 captures.

Affected (36)

Products: Apache: Http Server

Apache

1 product

Http Server

Configuration A

36 vulnerable

Vulnerable Software	Affected Versions
Apache Http Server	Version 1.3.11
Apache Http Server	Version 1.3.12
Apache Http Server	Version 1.3.14
Apache Http Server	Version 1.3.17
Apache Http Server	Version 1.3.18
Apache Http Server	Version 1.3.19
Apache Http Server	Version 1.3.1
Apache Http Server	Version 1.3.20
Apache Http Server	Version 1.3.22
Apache Http Server	Version 1.3.23
Apache Http Server	Version 1.3.24
Apache Http Server	Version 1.3.25
Apache Http Server	Version 1.3.26
Apache Http Server	Version 1.3.27
Apache Http Server	Version 1.3.28
Apache Http Server	Version 1.3.3
Apache Http Server	Version 1.3.4
Apache Http Server	Version 1.3.6
Apache Http Server	Version 1.3.9
Apache Http Server	Version 1.3
Apache Http Server	Version 2.0.28
Apache Http Server	Version 2.0.32
Apache Http Server	Version 2.0.35
Apache Http Server	Version 2.0.36
Apache Http Server	Version 2.0.37
Apache Http Server	Version 2.0.38
Apache Http Server	Version 2.0.39
Apache Http Server	Version 2.0.40
Apache Http Server	Version 2.0.41
Apache Http Server	Version 2.0.42
Apache Http Server	Version 2.0.43
Apache Http Server	Version 2.0.44
Apache Http Server	Version 2.0.45
Apache Http Server	Version 2.0.46
Apache Http Server	Version 2.0.47
Apache Http Server	Version 2.0

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (106)

ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.6/SCOSA-2004.6.txt (unsafe URL)

Source: cve@mitre.org

ftp://patches.sgi.com/support/free/security/advisories/20031203-01-U.asc (unsafe URL)

Source: cve@mitre.org

ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc (unsafe URL)

Source: cve@mitre.org

http://docs.info.apple.com/article.html?artnum=61798

Source: cve@mitre.org

http://httpd.apache.org/dist/httpd/Announcement2.html

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2004/Jan/msg00000.html

Source: cve@mitre.org

http://lists.apple.com/mhonarc/security-announce/msg00045.html

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=106761802305141&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=130497311408250&w=2

Source: cve@mitre.org

http://secunia.com/advisories/10096

Source: cve@mitre.org

http://secunia.com/advisories/10098

Source: cve@mitre.org

http://secunia.com/advisories/10102

Source: cve@mitre.org

http://secunia.com/advisories/10112

Source: cve@mitre.org

http://secunia.com/advisories/10114

Source: cve@mitre.org

http://secunia.com/advisories/10153

Source: cve@mitre.org

http://secunia.com/advisories/10260

Source: cve@mitre.org

http://secunia.com/advisories/10264

Source: cve@mitre.org

http://secunia.com/advisories/10463

Source: cve@mitre.org

http://secunia.com/advisories/10580

Source: cve@mitre.org

http://secunia.com/advisories/10593

Source: cve@mitre.org

http://sunsolve.sun.com/search/document.do?assetkey=1-26-101444-1

Source: cve@mitre.org

http://sunsolve.sun.com/search/document.do?assetkey=1-26-101841-1

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/434566

Source: cve@mitre.org

US Government Resource

http://www.kb.cert.org/vuls/id/549142

Source: cve@mitre.org

US Government Resource

http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2003:103

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2003-320.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2003-360.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2003-405.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2004-015.html

Source: cve@mitre.org

PatchVendor Advisory

http://www.redhat.com/support/errata/RHSA-2005-816.html

Source: cve@mitre.org

http://www.securityfocus.com/advisories/6079

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/342674

Source: cve@mitre.org

http://www.securityfocus.com/bid/8911

Source: cve@mitre.org

PatchVendor Advisory

http://www.securityfocus.com/bid/9504

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/13400

Source: cve@mitre.org

https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/r7035b7c9091c4b665a3b7205364775410646f12125d48e74e395f2ce%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/raa117ef183f0da9b3f46efbeaa66f7622bd68868a450cae4fd8ed594%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/re028d61fe612b0908595d658b9b39e74bca56f2a1ed3c5f06b5ab571%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3799

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A863

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A864

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9458

Source: cve@mitre.org

ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.6/SCOSA-2004.6.txt (unsafe URL)