Evil-DB LogoEvil-DB
← All CVEs

CVE-2003-0542

high · 7.2

Multiple stack-based buffer overflows in (1) mod_alias and (2) mod_rewrite for Apache before 1.3.29 allow attackers to create configuration files to cause a denial of service (crash) or execute arbitrary code via a regular expression with more than 9 captures.

7.2
CVSS
30.4%
EPSS (exploit prob.)
98th
EPSS percentile
2003-11-03
Published

AV:L/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

CWE-119

Affected products

VendorProductAffected versions
apachehttp_server1.3
apachehttp_server1.3.1
apachehttp_server1.3.3
apachehttp_server1.3.4
apachehttp_server1.3.6
apachehttp_server1.3.9
apachehttp_server1.3.11
apachehttp_server1.3.12
apachehttp_server1.3.14
apachehttp_server1.3.17
apachehttp_server1.3.18
apachehttp_server1.3.19
apachehttp_server1.3.20
apachehttp_server1.3.22
apachehttp_server1.3.23
apachehttp_server1.3.24
apachehttp_server1.3.25
apachehttp_server1.3.26
apachehttp_server1.3.27
apachehttp_server1.3.28
apachehttp_server2.0
apachehttp_server2.0.28
apachehttp_server2.0.32
apachehttp_server2.0.35
apachehttp_server2.0.36
apachehttp_server2.0.37
apachehttp_server2.0.38
apachehttp_server2.0.39
apachehttp_server2.0.40
apachehttp_server2.0.41
apachehttp_server2.0.42
apachehttp_server2.0.43
apachehttp_server2.0.44
apachehttp_server2.0.45
apachehttp_server2.0.46
apachehttp_server2.0.47

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2003-0542