CVE-2004-0700

Published: Jul 27, 2004Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for Apache before 1.3.31 may allow remote attackers to execute arbitrary messages via format string specifiers in certain log messages for HTTPS that are handled by the ssl_log function.

Affected (44)

Products: Mod Ssl: Mod Ssl · Gentoo: Linux

1 product

1 product

Configuration A

43 vulnerable

Vulnerable Software	Affected Versions
Mod Ssl Mod Ssl	Version 2.3.11
Mod Ssl Mod Ssl	Version 2.4.0
Mod Ssl Mod Ssl	Version 2.4.10
Mod Ssl Mod Ssl	Version 2.4.1
Mod Ssl Mod Ssl	Version 2.4.2
Mod Ssl Mod Ssl	Version 2.4.3
Mod Ssl Mod Ssl	Version 2.4.4
Mod Ssl Mod Ssl	Version 2.4.5
Mod Ssl Mod Ssl	Version 2.4.6
Mod Ssl Mod Ssl	Version 2.4.7
Mod Ssl Mod Ssl	Version 2.4.8
Mod Ssl Mod Ssl	Version 2.4.9
Mod Ssl Mod Ssl	Version 2.5.0
Mod Ssl Mod Ssl	Version 2.5.1
Mod Ssl Mod Ssl	Version 2.6.0
Mod Ssl Mod Ssl	Version 2.6.1
Mod Ssl Mod Ssl	Version 2.6.2
Mod Ssl Mod Ssl	Version 2.6.3
Mod Ssl Mod Ssl	Version 2.6.4
Mod Ssl Mod Ssl	Version 2.6.5
Mod Ssl Mod Ssl	Version 2.6.6
Mod Ssl Mod Ssl	Version 2.7.0
Mod Ssl Mod Ssl	Version 2.7.1
Mod Ssl Mod Ssl	Version 2.8.0
Mod Ssl Mod Ssl	Version 2.8.1.2
Mod Ssl Mod Ssl	Version 2.8.10
Mod Ssl Mod Ssl	Version 2.8.12
Mod Ssl Mod Ssl	Version 2.8.14
Mod Ssl Mod Ssl	Version 2.8.15
Mod Ssl Mod Ssl	Version 2.8.16
Mod Ssl Mod Ssl	Version 2.8.17
Mod Ssl Mod Ssl	Version 2.8.18
Mod Ssl Mod Ssl	Version 2.8.1
Mod Ssl Mod Ssl	Version 2.8.2
Mod Ssl Mod Ssl	Version 2.8.3
Mod Ssl Mod Ssl	Version 2.8.4
Mod Ssl Mod Ssl	Version 2.8.5.1
Mod Ssl Mod Ssl	Version 2.8.5.2
Mod Ssl Mod Ssl	Version 2.8.5
Mod Ssl Mod Ssl	Version 2.8.6
Mod Ssl Mod Ssl	Version 2.8.7
Mod Ssl Mod Ssl	Version 2.8.8
Mod Ssl Mod Ssl	Version 2.8.9

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Gentoo Linux	Version 1.4

References (30)

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000857

Source: cve@mitre.org

http://marc.info/?l=apache-modssl&m=109001100906749&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=109005001205991&w=2

Source: cve@mitre.org

http://packetstormsecurity.org/0407-advisories/modsslFormat.txt

Source: cve@mitre.org

http://virulent.siyahsapka.org/

Source: cve@mitre.org

http://www.debian.org/security/2004/dsa-532

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/303448

Source: cve@mitre.org

Third Party AdvisoryUS Government Resource

http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:075

Source: cve@mitre.org

http://www.osvdb.org/7929

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2004-405.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2004-408.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/10736

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-177-1

Source: cve@mitre.org

https://bugzilla.fedora.us/show_bug.cgi?id=1888

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/16705

Source: cve@mitre.org

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000857

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=apache-modssl&m=109001100906749&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=109005001205991&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://packetstormsecurity.org/0407-advisories/modsslFormat.txt

Source: af854a3a-2127-422b-91ae-364da2661108

http://virulent.siyahsapka.org/

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2004/dsa-532

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kb.cert.org/vuls/id/303448

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:075

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/7929

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2004-405.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2004-408.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/10736

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-177-1

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.fedora.us/show_bug.cgi?id=1888

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/16705

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.