CVE-2004-0700 Other in n/a
Remote attackers can execute arbitrary code via format string vulnerabilities in Apache mod_ssl HTTPS log handling.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2004-0700?
CVE-2004-0700 is a high-severity vulnerability in Gentoo Linux, published on 21 Jul 2004. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for Apache before 1.3.31 may allow remote attackers to execute arbitrary messages via format string specifiers in certain log messages for HTTPS that are handled by the ssl_log function.
Which versions are affected by CVE-2004-0700?
It affects 2 products.
Products include Gentoo Linux, Mod Ssl Mod Ssl.
How do I fix CVE-2004-0700?
Upgrade to a fixed version.
Is CVE-2004-0700 being exploited?
There is no known exploitation of CVE-2004-0700 in the wild and no public exploit code.
Other vulnerabilities in Gentoo Linux
Sources
Also known as GHSA-mm6m-9rf6-5j2q.