Vulnerability in Dag Apt Repository Mod Gzip
CVE-2003-0842
Stack-based buffer overflow in mod_gzip_printf for mod_gzip 1.3.26.1a and earlier, and possibly later official versions, when running in debug mode, allows remote attackers to execute arbitrary code via a long filename in a GET request with an "Accept-Encoding: gzip" header.
EPSS: 0.035 (88.1th percentile) — read the EPSS interpretation.
Affected products
- Dag_apt_repository Mod_gzip — versions 1.3.26.1a
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)