CVE-2004-0940: apache http_server Incorrect Calculation of Buffer Size
Vulnerability summary
CVE-2004-0940 is a high (CVSS 7.8) Incorrect Calculation of Buffer Size vulnerability in apache http_server. EPSS estimates a 4.83% chance of exploitation in the next 30 days, higher than 91.8% of scored vulnerabilities. 3 public exploits are recorded.
Timeline
- 26-10-2004PublishedVulnerability first disclosed.
- 08-08-2024Last modifiedVulnerability information updated.
Description
Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as the apache user via SSI (XSSI) documents that trigger a length calculation error.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
4.83%
Chance of exploitation in the next 30 days
Percentile
92%
Versus all other CVEs
30-day change
0.00 pp
From 4.83% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
3 foundExploit Reference (securityfocus.com)
Maturity: unknown
Apache 1.3.31 mod_include - Local Buffer Overflow
Maturity: weaponized
Apache 1.3.x mod_include - Local Buffer Overflow
Maturity: weaponized
Weaknesses
CWE · root causeAffected systems
Apache1 product
- http_server≥ 1.3, ≤ 1.3.32
Debian1 product
- apache< 1.3.26-0woody6
Hp1 product
- hp-ux11.00 | 11.11 | 11.20 | 11.22
Openpkg1 product
- openpkg2.0 | 2.1 | 2.2
Slackware1 product
- slackware_linuxEOL8.0 | 8.1 | 9.0 | 9.1 | 10.0 | current
Suse1 product
- suse_linux8.0 | 8.1 | 8.2 | 9.0 | 9.1 | 9.2
Trustix1 product
- secure_linux1.5
7 vendors · 7 products
References
21 links- marc.info?l=bugtraq&m=109906660225051&w=2Vendor AdvisoryX Refsource OPENPKGMailing ListThird Party Advisory
- www.mandriva.com/security/advisories?name=MDKSA-2004:134Vendor AdvisoryX Refsource MANDRAKEThird Party Advisory
- www.securityfocus.com/bid/11471VDB EntryX Refsource BIDBroken LinkExploitPatchThird Party AdvisoryVendor Advisory
www.debian.org/security/2004/dsa-594Vendor AdvisoryX Refsource DEBIANMailing ListThird Party Advisory
Show all 21 references
- sunsolve.sun.com/search/document.do?assetkey=1-26-102197-1Vendor AdvisoryX Refsource SUNALERTBroken Link