1. Home
  2. CVE Database
  3. CVE-2003-0843
HIGH · 7.5

CVE-2003-0843

Format string vulnerability in mod_gzip_printf for mod_gzip 1.3.26.1a and earlier, and possibly later official versions, when running in debug mode and using the Apache log, allows remote attackers to...

Vulnerability Description

Format string vulnerability in mod_gzip_printf for mod_gzip 1.3.26.1a and earlier, and possibly later official versions, when running in debug mode and using the Apache log, allows remote attackers to execute arbitrary code via format string characters in an HTTP GET request with an "Accept-Encoding: gzip" header.

CVSS Score

7.5

HIGH

AV:N/AC:L/Au:N/C:P/I:P/A:P
Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
PARTIAL

Affected Products

VendorProductVersions
Dag Apt RepositoryMod Gzip<= 1.3.26.1a

References

FAQ

What is CVE-2003-0843?

CVE-2003-0843 is a vulnerability with a CVSS score of 7.5 (HIGH). Format string vulnerability in mod_gzip_printf for mod_gzip 1.3.26.1a and earlier, and possibly later official versions, when running in debug mode and using the Apache log, allows remote attackers to...

How severe is CVE-2003-0843?

CVE-2003-0843 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2003-0843?

Check the references section above for vendor advisories and patch information. Affected products include: Dag Apt Repository Mod Gzip.