Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via a negative Content-Length HTTP header field, which causes a large amount of data to be copied.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apache Httpd | — | Upgrade to the latest version of Apache HTTPD | Apr 12, 2012 | Aug 6, 2004 |
| Freebsd | — | Upgrade apacheUpgrade apache13-sslUpgrade apache13-modperlUpgrade apache13+ipv6Upgrade apache13-modssl | Dec 10, 2025 | Sep 19, 2004 |
| Gentoo Linux | — | Upgrade www-servers/apache. | Oct 30, 2017 | Aug 6, 2004 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub