Vulnerability CVE-2004-0786 - CERT Civis.Net

Vulnerability Name:

CVE-2004-0786 (CCN-17382)

Assigned:

2004-09-15

Published:

2004-09-15

Updated:

2021-06-06

Summary:

The IPv6 URI parsing routines in the apr-util library for Apache 2.0.50 and earlier allow remote attackers to cause a denial of service (child process crash) via a certain URI, as demonstrated using the Codenomicon HTTP Test Tool.

CVSS v3 Severity:

5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Low

CVSS v2 Severity:

5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

5.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

Vulnerability Type:

Vulnerability Consequences:

Gain Access

References:

Source: CCN
Type: Full-Disclosure Mailing List, Sun Oct 24 2004 - 10:28:12 CDT
confixx e-mail bug

Source: MITRE
Type: CNA
CVE-2004-0786

Source: CCN
Type: Conectiva Linux Security Announcement CLSA-2004:868
Several vulnerabilities in apache, mod_ssl and mod_dav

Source: CCN
Type: AppleCare Knowledge Base Document 61798
Security Update 2004-12-02

Source: CCN
Type: Apache HTTP Server Project Web site
Apache HTTPD Project - The Apache HTTPD Server Project

Source: CCN
Type: RHSA-2004-463
httpd security update

Source: CCN
Type: SA12540
Apache apr-util Library and Environment Variable Expansion Vulnerabilities

Source: SECUNIA
Type: UNKNOWN
12540

Source: CCN
Type: CIAC Information Bulletin P-049
Apple Security Update 2004-12-02

Source: CCN
Type: GLSA-200409-21
Apache 2, mod_dav: Multiple vulnerabilities

Source: GENTOO
Type: UNKNOWN
GLSA-200409-21

Source: MANDRAKE
Type: UNKNOWN
MDKSA-2004:096

Source: SUSE
Type: UNKNOWN
SUSE-SA:2004:032

Source: REDHAT
Type: Patch, Vendor Advisory
RHSA-2004:463

Source: CCN
Type: BID-11187
Apache Web Server Remote IPv6 Buffer Overflow Vulnerability

Source: CCN
Type: Trustix Secure Linux Security Advisory #2004-0047
Several security holes

Source: TRUSTIX
Type: UNKNOWN
2004-0047

Source: CCN
Type: TLSA-2004-28
Two vulnerabilities discovered in httpd

Source: CCN
Type: UNIRAS (UK Govt CERT) ALERT - 34/04
Vulnerability Issues with the Apache Web Server

Source: XF
Type: UNKNOWN
apache-ipv6-aprutil-dos(17382)

Source: XF
Type: UNKNOWN
apache-ipv6-aprutil-dos(17382)

Source: MLIST
Type: UNKNOWN
[httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

Source: MLIST
Type: UNKNOWN
[httpd-cvs] 20190815 svn commit: r1048743 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

Source: MLIST
Type: UNKNOWN
[httpd-cvs] 20200401 svn commit: r1058586 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

Source: MLIST
Type: UNKNOWN
[httpd-cvs] 20210330 svn commit: r1073140 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

Source: MLIST
Type: UNKNOWN
[httpd-cvs] 20210606 svn commit: r1075470 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

Source: MLIST
Type: UNKNOWN
[httpd-cvs] 20210330 svn commit: r1073149 [4/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/

Source: MLIST
Type: UNKNOWN
[httpd-cvs] 20200401 svn commit: r1058587 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

Source: MLIST
Type: UNKNOWN
[httpd-cvs] 20210330 svn commit: r1073143 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/

Source: MLIST
Type: UNKNOWN
[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/

Source: MLIST
Type: UNKNOWN
[httpd-cvs] 20210330 svn commit: r1888194 [3/13] - /httpd/site/trunk/content/security/json/

Source: MLIST
Type: UNKNOWN
[httpd-cvs] 20210330 svn commit: r1073139 [3/13] - in /websites/staging/httpd/trunk/content: ./ security/json/

Source: MLIST
Type: UNKNOWN
[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/

Source: OVAL
Type: UNKNOWN
oval:org.mitre.oval:def:11380

Source: SUSE
Type: SUSE-SA:2004:032
apache2: remote denial-of-service

Source: CCN
Type: IBM Systems Support Web site
Support for HMC

Vulnerable Configuration:

Configuration 1:

cpe:/a:apache:http_server:2.0:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.39:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.40:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.47:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.48:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.37:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.38:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.45:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.46:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.28:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.32:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.41:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.42:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.50:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.35:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.44:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.49:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.36:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.43:*:*:*:*:*:*:*

Configuration RedHat 1:

cpe:/o:redhat:enterprise_linux:*:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:apache:http_server:2.0:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.38:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.39:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.42:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.47:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.49:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.48:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.40:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.46:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.28:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.32:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.35:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.36:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.37:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.41:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.43:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.44:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.45:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.0.50:*:*:*:*:*:*:*

AND

cpe:/o:hp:hp-ux:11.00:*:*:*:*:*:*:*

OR cpe:/o:hp:hp-ux:11.11:*:*:*:*:*:*:*

OR cpe:/o:gentoo:linux:*:*:*:*:*:*:*:*

OR cpe:/o:hp:hp-ux:11.22:*:*:*:*:*:*:*

OR cpe:/o:suse:suse_linux:8.1:*:*:*:*:*:*:*

OR cpe:/o:suse:suse_linux:8.2:*:*:*:*:*:*:*

OR cpe:/o:conectiva:linux:9.0:*:*:*:*:*:*:*

OR cpe:/o:trustix:secure_linux:2.0:*:*:*:*:*:*:*

OR cpe:/o:hp:hp-ux:11.23:*:*:*:*:*:*:*

OR cpe:/o:suse:suse_linux:9.0:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:3::ws:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:3::es:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:3::as:*:*:*:*:*

OR cpe:/o:trustix:secure_linux:2.1:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*

OR cpe:/o:suse:suse_linux:9.1:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:3::desktop:*:*:*:*:*

OR cpe:/o:conectiva:linux:10:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*

OR cpe:/o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:9.2::amd64:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:10.0::amd64:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.mitre.oval:def:11380	V	The IPv6 URI parsing routines in the apr-util library for Apache 2.0.50 and earlier allow remote attackers to cause a denial of service (child process crash) via a certain URI, as demonstrated using the Codenomicon HTTP Test Tool.	2013-04-29
oval:org.opensuse.security:def:20040786	V	CVE-2004-0786	2012-08-30
oval:com.redhat.rhsa:def:20040463	P	RHSA-2004:463: httpd security update (Moderate)	2004-09-15