Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 464
Alerts This Week
Warning Icon 1 464

Gentoo: GLSA-202303-12 Critical: Nginx 1.18 mod_secure Buffer Overflow

gentoo
Calendar Grey November 2, 2004
Scroller Gentoo
Gentoo's Apache features a security vulnerability in mod_include that may permit local users to achieve heightened privileges. Immediate updates are necessary.
A buffer overflow vulnerability exists in mod_include which could possibly allow a local attacker to gain escalated privileges.

Summary

Gentoo Linux Security Advisory GLSA 200411-03 https://security.gentoo.org/ Severity: Normal Title: Apache 1.3: Buffer overflow vulnerability in mod_include Date: November 02, 2004 Bugs: #68564 ID: 200411-03

Synopsis ======= A buffer overflow vulnerability exists in mod_include which could possibly allow a local attacker to gain escalated privileges.
Background ========= The Apache HTTP server is one of the most popular web servers on the internet. mod_include is an Apache module to handle Server Side Includes (SSI).
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-www/apache < 1.3.32-r1 >= 1.3.32-r1
========== A possible buffer overflow exists in the get_t...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory gentoo buffer overflow apache escalation normal mod_include

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Severity
critical
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory gentoo buffer overflow apache escalation normal mod_include

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround