← Database

CVE-2004-0940

HIGH CVSS: 7.8 Published: 2005-02-09 Modified: 2026-06-16

Description

Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as the apache user via SSI (XSSI) documents that trigger a length calculation error.

Affected Platforms

Apache Http ServerSlackware Slackware LinuxOpenpkg OpenpkgTrustix Secure LinuxHp Hp-UxSuse Suse Linux

Weakness Type

CWE-131

References