Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as the apache user via SSI (XSSI) documents that trigger a length calculation error.

Threat-Mapped Scoring

Score: 1.9

Priority: P3 - Important (Medium)

• S9 – Sabotage of System/App
• S10 – Denial of Service (+0.1 bonus)

EPSS

Score: 0.04161
Percentile: 0.882

CVSS Scoring

Mapped CWE(s)

• CWE-131 : Incorrect Calculation of Buffer Size

All CAPEC(s)

CAPEC(s) with Mapped TTPs

Mapped ATT&CK TTPs

Affected Products

• cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*
• cpe:2.3:a:openpkg:openpkg:2.0:*:*:*:*:*:*:*
• cpe:2.3:a:openpkg:openpkg:2.1:*:*:*:*:*:*:*
• cpe:2.3:a:openpkg:openpkg:2.2:*:*:*:*:*:*:*
• cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*
• cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*
• cpe:2.3:o:hp:hp-ux:11.20:*:*:*:*:*:*:*
• cpe:2.3:o:hp:hp-ux:11.22:*:*:*:*:*:*:*
• cpe:2.3:o:slackware:slackware_linux:8.0:*:*:*:*:*:*:*
• cpe:2.3:o:slackware:slackware_linux:8.1:*:*:*:*:*:*:*
• cpe:2.3:o:slackware:slackware_linux:9.0:*:*:*:*:*:*:*
• cpe:2.3:o:slackware:slackware_linux:9.1:*:*:*:*:*:*:*
• cpe:2.3:o:slackware:slackware_linux:10.0:*:*:*:*:*:*:*
• cpe:2.3:o:slackware:slackware_linux:current:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*
• cpe:2.3:o:trustix:secure_linux:1.5:*:*:*:*:*:*:*

← Back to Home