Vulnerability CVE-2003-0245 - CERT Civis.Net

Vulnerability Name:

CVE-2003-0245 (CCN-12090)

Assigned:

2003-05-28

Published:

2003-05-28

Updated:

2021-06-06

Summary:

Vulnerability in the apr_psprintf function in the Apache Portable Runtime (APR) library for Apache 2.0.37 through 2.0.45 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long strings, as demonstrated using XML objects to mod_dav, and possibly other vectors.

CVSS v3 Severity:

5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Low

CVSS v2 Severity:

5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

5.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

Vulnerability Type:

Vulnerability Consequences:

Gain Access

References:

Source: CCN
Type: iDEFENSE Security Advisory 05.30.03
Apache Portable Runtime Denial of Service and Arbitrary Code Execution Vulnerability

Source: VULNWATCH
Type: UNKNOWN
20030530 iDEFENSE Security Advisory 05.30.03: Apache Portable Runtime Denial of Service and Arbitrary Code Execution Vulnerability

Source: MITRE
Type: CNA
CVE-2003-0245

Source: CONECTIVA
Type: UNKNOWN
CLA-2003:661

Source: BUGTRAQ
Type: UNKNOWN
20030528 [SECURITY] [ANNOUNCE] Apache 2.0.46 released

Source: CCN
Type: RHSA-2003-186
Updated httpd packages fix Apache security vulnerabilities

Source: CCN
Type: Apache Web site
Apache 2.0.46 Released

Source: CONFIRM
Type: Patch, Vendor Advisory
http://www.apache.org/dist/httpd/Announcement2.html

Source: CCN
Type: CIAC Information Bulletin N-099
Apache 2.0.46 Release Fixes Security Vulnerabilities

Source: CCN
Type: CIAC Information Bulletin N-146
Apache 2.0.47 Release Fixes Security Vulnerabilities

Source: MISC
Type: UNKNOWN
http://www.idefense.com/advisory/05.30.03.txt

Source: CCN
Type: US-CERT VU#757612
Apache Portable Runtime contains heap buffer overflow in apr_psprintf()

Source: CERT-VN
Type: Third Party Advisory, US Government Resource
VU#757612

Source: MANDRAKE
Type: UNKNOWN
MDKSA-2003:063

Source: CCN
Type: OSVDB ID: 4340
Apache Portable Runtime (APR) apr_psprintf DoS

Source: REDHAT
Type: Patch, Vendor Advisory
RHSA-2003:186

Source: CCN
Type: Gentoo Linux Security Announcement 2002-05-13
apache-2.x - denial of service

Source: BID
Type: UNKNOWN
7723

Source: CCN
Type: BID-7723
Apache APR_PSPrintf Memory Corruption Vulnerability

Source: XF
Type: UNKNOWN
apache-aprpsprintf-code-execution(12090)

Source: XF
Type: UNKNOWN
apache-aprpsprintf-code-execution(12090)

Source: MLIST
Type: UNKNOWN
[httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

Source: MLIST
Type: UNKNOWN
[httpd-cvs] 20190815 svn commit: r1048743 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

Source: MLIST
Type: UNKNOWN
[httpd-cvs] 20200401 svn commit: r1058586 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

Source: MLIST
Type: UNKNOWN
[httpd-cvs] 20210330 svn commit: r1073140 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

Source: MLIST
Type: UNKNOWN
[httpd-cvs] 20210606 svn commit: r1075470 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

Source: MLIST
Type: UNKNOWN
[httpd-cvs] 20210330 svn commit: r1888194 [2/13] - /httpd/site/trunk/content/security/json/

Source: MLIST
Type: UNKNOWN
[httpd-cvs] 20200401 svn commit: r1058587 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

Source: MLIST
Type: UNKNOWN
[httpd-cvs] 20210330 svn commit: r1073143 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/

Source: MLIST
Type: UNKNOWN
[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/

Source: MLIST
Type: UNKNOWN
[httpd-cvs] 20210330 svn commit: r1073149 [3/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/

Source: MLIST
Type: UNKNOWN
[httpd-cvs] 20210330 svn commit: r1073139 [2/13] - in /websites/staging/httpd/trunk/content: ./ security/json/

Source: MLIST
Type: UNKNOWN
[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/

Vulnerable Configuration:

Configuration 1:

cpe:/a:apache:http_server:2.0.40:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.41:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.38:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.39:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.42:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.43:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.37:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.44:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.45:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:apache:http_server:2.0.38:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.39:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.42:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.40:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.37:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.41:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.43:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.44:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.45:*:*:*:*:*:*:*

AND

cpe:/o:hp:hp-ux:11.00:*:*:*:*:*:*:*

OR cpe:/o:redhat:linux:7:*:*:*:*:*:*:*

OR cpe:/o:hp:hp-ux:11.11:*:*:*:*:*:*:*

OR cpe:/o:redhat:linux:7.1:*:*:*:*:*:*:*

OR cpe:/o:redhat:linux:7.2:*:*:*:*:*:*:*

OR cpe:/o:redhat:linux:7.3:*:*:*:*:*:*:*

OR cpe:/o:gentoo:linux:*:*:*:*:*:*:*:*

OR cpe:/o:redhat:linux:8.0:*:*:*:*:*:*:*

OR cpe:/o:hp:hp-ux:11.22:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:9.1:*:*:*:*:*:*:*

OR cpe:/o:redhat:linux:9.0:*:*:*:*:*:*:*

OR cpe:/o:conectiva:linux:9.0:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:9.1::ppc:*:*:*:*:*

Denotes that component is vulnerable