01 Record

CVE-2003-0542

Multiple stack-based buffer overflows in (1) mod_alias and (2) mod_rewrite for Apache before 1.3.29 allow attackers to create configuration files to cause a denial of service (crash) or execute

UnratedPUBLISHEDCNA: mitre

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

Multiple stack-based buffer overflows in (1) mod_alias and (2) mod_rewrite for Apache before 1.3.29 allow attackers to create configuration files to cause a denial of service (crash) or execute

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 30.42% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 98.1% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Modified. NVD last modified this record on 2026-06-16.
Red Hat severity: Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2003-10-30 05:00Z23 YR AGO

Last updated

2024-08-08 01:58Z2 YR AGO

Reserved

2003-07-14

Assigning CNA

mitre

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferClass

Data version

5.1

Document digest

2e3ca15f3b622e19ad306d676effd5f95914ceba665ffd80bbc570795c571a49

05 Affected products

VendorProductVersionsPlatforms

apachehttp_serverNot specified—

redhatenterprise_linuxNot specified—

redhatlinuxNot specified—

redhatrhel_strongholdNot specified—

redhatstrongholdNot specified—

06 References

patches.sgi.com20040202-01-Uftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.ascvendor-advisoryx_refsource_SGI
www.redhat.comRHSA-2004:015http://www.redhat.com/support/errata/RHSA-2004-015.htmlvendor-advisoryx_refsource_REDHAT
secunia.com10112http://secunia.com/advisories/10112third-party-advisoryx_refsource_SECUNIA
www.kb.cert.orgVU#434566http://www.kb.cert.org/vuls/id/434566third-party-advisoryx_refsource_CERT-VN
secunia.com10593http://secunia.com/advisories/10593third-party-advisoryx_refsource_SECUNIA
www.mandrakesecure.netMDKSA-2003:103http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2003:103vendor-advisoryx_refsource_MANDRAKE
www.redhat.comRHSA-2003:360http://www.redhat.com/support/errata/RHSA-2003-360.htmlvendor-advisoryx_refsource_REDHAT
marc.infoSSRT090208http://marc.info/?l=bugtraq&m=130497311408250&w=2vendor-advisoryx_refsource_HP
httpd.apache.orghttp://httpd.apache.org/dist/httpd/Announcement2.htmlx_refsource_CONFIRM
lists.apple.comhttp://lists.apple.com/mhonarc/security-announce/msg00045.htmlx_refsource_CONFIRM
lists.apple.comAPPLE-SA-2004-01-26http://lists.apple.com/archives/security-announce/2004/Jan/msg00000.htmlvendor-advisoryx_refsource_APPLE
ftp.sco.comSCOSA-2004.6ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.6/SCOSA-2004.6.txtvendor-advisoryx_refsource_SCO
www.redhat.comRHSA-2003:405http://www.redhat.com/support/errata/RHSA-2003-405.htmlvendor-advisoryx_refsource_REDHAT
oval.cisecurity.orgoval:org.mitre.oval:def:3799https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3799vdb-entrysignaturex_refsource_OVAL
www.securityfocus.com9504http://www.securityfocus.com/bid/9504vdb-entryx_refsource_BID
www.securityfocus.com20031028 [OpenPKG-SA-2003.046] OpenPKG Security Advisory (apache)http://www.securityfocus.com/archive/1/342674mailing-listx_refsource_BUGTRAQ
patches.sgi.com20031203-01-Uftp://patches.sgi.com/support/free/security/advisories/20031203-01-U.ascvendor-advisoryx_refsource_SGI
oval.cisecurity.orgoval:org.mitre.oval:def:9458https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9458vdb-entrysignaturex_refsource_OVAL
secunia.com10102http://secunia.com/advisories/10102third-party-advisoryx_refsource_SECUNIA
exchange.xforce.ibmcloud.comapache-modalias-modrewrite-bo(13400)https://exchange.xforce.ibmcloud.com/vulnerabilities/13400vdb-entryx_refsource_XF
www.securityfocus.comHPSBUX0311-301http://www.securityfocus.com/advisories/6079vendor-advisoryx_refsource_HP
www.redhat.comRHSA-2005:816http://www.redhat.com/support/errata/RHSA-2005-816.htmlvendor-advisoryx_refsource_REDHAT
secunia.com10153http://secunia.com/advisories/10153third-party-advisoryx_refsource_SECUNIA
secunia.com10098http://secunia.com/advisories/10098third-party-advisoryx_refsource_SECUNIA
secunia.com10264http://secunia.com/advisories/10264third-party-advisoryx_refsource_SECUNIA
oval.cisecurity.orgoval:org.mitre.oval:def:864https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A864vdb-entrysignaturex_refsource_OVAL
secunia.com10580http://secunia.com/advisories/10580third-party-advisoryx_refsource_SECUNIA
sunsolve.sun.com101841http://sunsolve.sun.com/search/document.do?assetkey=1-26-101841-1vendor-advisoryx_refsource_SUNALERT
www.redhat.comRHSA-2003:320http://www.redhat.com/support/errata/RHSA-2003-320.htmlvendor-advisoryx_refsource_REDHAT
sunsolve.sun.com101444http://sunsolve.sun.com/search/document.do?assetkey=1-26-101444-1vendor-advisoryx_refsource_SUNALERT
secunia.com10260http://secunia.com/advisories/10260third-party-advisoryx_refsource_SECUNIA
secunia.com10463http://secunia.com/advisories/10463third-party-advisoryx_refsource_SECUNIA
marc.info20031031 GLSA: apache (200310-04)http://marc.info/?l=bugtraq&m=106761802305141&w=2mailing-listx_refsource_BUGTRAQ
www.kb.cert.orgVU#549142http://www.kb.cert.org/vuls/id/549142third-party-advisoryx_refsource_CERT-VN
docs.info.apple.comhttp://docs.info.apple.com/article.html?artnum=61798x_refsource_CONFIRM
secunia.com10096http://secunia.com/advisories/10096third-party-advisoryx_refsource_SECUNIA
secunia.com10114http://secunia.com/advisories/10114third-party-advisoryx_refsource_SECUNIA
www.securityfocus.com8911http://www.securityfocus.com/bid/8911vdb-entryx_refsource_BID
oval.cisecurity.orgoval:org.mitre.oval:def:863https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A863vdb-entrysignaturex_refsource_OVAL
lists.apache.org[httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlhttps://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3Emailing-listx_refsource_MLIST
lists.apache.org[httpd-cvs] 20190815 svn commit: r1048743 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlhttps://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3Emailing-listx_refsource_MLIST
lists.apache.org[httpd-cvs] 20200401 svn commit: r1058586 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlhttps://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3Emailing-listx_refsource_MLIST
lists.apache.org[httpd-cvs] 20200401 svn commit: r1058587 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlhttps://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3Emailing-listx_refsource_MLIST
lists.apache.org[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3Emailing-listx_refsource_MLIST
lists.apache.org[httpd-cvs] 20210330 svn commit: r1073139 [2/13] - in /websites/staging/httpd/trunk/content: ./ security/json/https://lists.apache.org/thread.html/re028d61fe612b0908595d658b9b39e74bca56f2a1ed3c5f06b5ab571%40%3Ccvs.httpd.apache.org%3Emailing-listx_refsource_MLIST
lists.apache.org[httpd-cvs] 20210330 svn commit: r1073140 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlhttps://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3Emailing-listx_refsource_MLIST
lists.apache.org[httpd-cvs] 20210330 svn commit: r1888194 [2/13] - /httpd/site/trunk/content/security/json/https://lists.apache.org/thread.html/r7035b7c9091c4b665a3b7205364775410646f12125d48e74e395f2ce%40%3Ccvs.httpd.apache.org%3Emailing-listx_refsource_MLIST
lists.apache.org[httpd-cvs] 20210330 svn commit: r1073140 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlhttps://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3Emailing-listx_refsource_MLIST
lists.apache.org[httpd-cvs] 20210330 svn commit: r1073143 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3Emailing-listx_refsource_MLIST
lists.apache.org[httpd-cvs] 20210330 svn commit: r1073149 [3/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/https://lists.apache.org/thread.html/raa117ef183f0da9b3f46efbeaa66f7622bd68868a450cae4fd8ed594%40%3Ccvs.httpd.apache.org%3Emailing-listx_refsource_MLIST
lists.apache.org[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3Emailing-listx_refsource_MLIST
lists.apache.org[httpd-cvs] 20210606 svn commit: r1075470 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlhttps://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3Emailing-listx_refsource_MLIST
lists.apache.org[httpd-cvs] 20210606 svn commit: r1075470 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlhttps://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3Emailing-listx_refsource_MLIST

07 Fixed in

Debian 12

apache2
Fixed in 2.0.48

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

apache2
Fixed in 2.0.48

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

apache2
Fixed in 2.0.48

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

A release or ecosystem missing from this list has no record here. It may be unaffected or not covered by the source. Source notices and licences.