ubuntu · CVE-2004-0488

Quick triage

Priority: medium Published: 2004-07-07 04:00:00 UTC Updated: 2025-07-17 16:33:51 UTC

View at Official ubuntu advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2004-0488 medium priority: Ubuntu including 1 source packages (apache2), 4 status rows across 4 suites (dapper, edgy, feisty, upstream): released 3, needs-triage 1.

Description:

Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN.

cvelogic Threat Intelligence