CVE-2004-0940

Exploitation

Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.

SSVC decision

Not assessed by CISA

EPSS probability

4.83% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 91.2% of scored records. A rank, not a probability.

NVD base score

7.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-06-16.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2004-10-26 04:00Z21 YR AGO

Last updated

2024-08-08 00:31Z2 YR AGO

Reserved

2004-10-12

Assigning CNA

mitre

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

• CWE-131Incorrect Calculation of Buffer SizeBase

Data version

5.1

Document digest

8bf305bb61602b248a3ff3cef58a8caae2f5d5330aad9636ee5b8422630390fc

• marc.infoOpenPKG-SA-2004.047http://marc.info/?l=bugtraq&m=109906660225051&w=2vendor-advisoryx_refsource_OPENPKG
• www.apacheweek.comhttp://www.apacheweek.com/features/security-13x_refsource_CONFIRM
• support.avaya.comhttp://support.avaya.com/elmodocs2/security/ASA-2006-081.htmx_refsource_CONFIRM
• www.mandriva.comMDKSA-2004:134http://www.mandriva.com/security/advisories?name=MDKSA-2004:134vendor-advisoryx_refsource_MANDRAKE
• exchange.xforce.ibmcloud.comapache-modinclude-bo(17785)https://exchange.xforce.ibmcloud.com/vulnerabilities/17785vdb-entryx_refsource_XF
• www.securityfocus.com11471http://www.securityfocus.com/bid/11471vdb-entryx_refsource_BID
• www.redhat.comRHSA-2005:816http://www.redhat.com/support/errata/RHSA-2005-816.htmlvendor-advisoryx_refsource_REDHAT
• secunia.com12898http://secunia.com/advisories/12898/third-party-advisoryx_refsource_SECUNIA
• www.debian.orgDSA-594http://www.debian.org/security/2004/dsa-594vendor-advisoryx_refsource_DEBIAN
• secunia.com19073http://secunia.com/advisories/19073third-party-advisoryx_refsource_SECUNIA
• securitytracker.com1011783http://securitytracker.com/id?1011783vdb-entryx_refsource_SECTRACK
• www.redhat.comRHSA-2004:600http://www.redhat.com/support/errata/RHSA-2004-600.htmlvendor-advisoryx_refsource_REDHAT
• sunsolve.sun.com102197http://sunsolve.sun.com/search/document.do?assetkey=1-26-102197-1vendor-advisoryx_refsource_SUNALERT
• www.vupen.comADV-2006-0789http://www.vupen.com/english/advisories/2006/0789vdb-entryx_refsource_VUPEN
• lists.apache.org[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3Emailing-listx_refsource_MLIST
• lists.apache.org[httpd-cvs] 20210330 svn commit: r1073139 [3/13] - in /websites/staging/httpd/trunk/content: ./ security/json/https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3Emailing-listx_refsource_MLIST
• lists.apache.org[httpd-cvs] 20210330 svn commit: r1073140 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlhttps://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3Emailing-listx_refsource_MLIST
• lists.apache.org[httpd-cvs] 20210330 svn commit: r1888194 [3/13] - /httpd/site/trunk/content/security/json/https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3Emailing-listx_refsource_MLIST
• lists.apache.org[httpd-cvs] 20210330 svn commit: r1073149 [4/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/https://lists.apache.org/thread.html/r734a07156abf332d5ab27fb91d9d962cacfef4f3681e44056f064fa8%40%3Ccvs.httpd.apache.org%3Emailing-listx_refsource_MLIST
• lists.apache.org[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3Emailing-listx_refsource_MLIST
• lists.apache.org[httpd-cvs] 20210606 svn commit: r1075470 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlhttps://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3Emailing-listx_refsource_MLIST