CVE-2004-0488
Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache...
7.5 HighFix available
Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN.
Exploit likelihood
37.7%Up 24.4 points since Feb 4, 2022
What each source reports
NVD Score used
Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN.
- Record
CVE-2004-0488- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-787
- Updated
- 2026-11-02
CVE List No score
Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN.
- Record
CVE-2004-0488- Updated
- 2026-11-02
EUVDEUVD-2004-0487 No score
Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN.
- Record
EUVD-2004-0487- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cwr4-7j4w-3vv9 No score
Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache...
Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN.
- Record
GHSA-cwr4-7j4w-3vv9- Updated
- 2026-11-02
OSVBELL-CVE-2004-0488
CVE-2004-0488 does not affect BellSoft software
- Record
BELL-CVE-2004-0488- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
OSV No score
Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN.
- Record
CVE-2004-0488- Updated
- 2026-11-02
OSVDEBIAN-CVE-2004-0488 No score
Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN.
- Record
DEBIAN-CVE-2004-0488- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
apache2Debian:12 |
before 2.0.50-1 | 2.0.50-1 |
apache2Debian:13 |
before 2.0.50-1 | 2.0.50-1 |
apache2Debian:14 |
before 2.0.50-1 | 2.0.50-1 |
libapache-mod-sslDebian:3.0 From an advisory covering 2 CVEs |
before 2.8.9-2.4, plus listed versions 2.4.10-1.3.9-1potato22.4.10-1.3.9-1potato42.8.7-1 |
2.8.9-2.4 |
httpdRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs |
before 0:2.0.46-32.ent.3 | 0:2.0.46-32.ent.3 |
httpd-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs |
before 0:2.0.46-32.ent.3 | 0:2.0.46-32.ent.3 |
httpd-develRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs |
before 0:2.0.46-32.ent.3 | 0:2.0.46-32.ent.3 |
mod_sslRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs |
before 1:2.0.46-32.ent.3 | 1:2.0.46-32.ent.3 |
httpdRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs |
before 0:2.0.46-32.ent.3 | 0:2.0.46-32.ent.3 |
httpd-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs |
before 0:2.0.46-32.ent.3 | 0:2.0.46-32.ent.3 |
Show 16 moreShow less
| Package | Affected | Fixed |
|---|---|---|
httpd-develRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs |
before 0:2.0.46-32.ent.3 | 0:2.0.46-32.ent.3 |
mod_sslRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs |
before 1:2.0.46-32.ent.3 | 1:2.0.46-32.ent.3 |
httpdRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs |
before 0:2.0.46-32.ent.3 | 0:2.0.46-32.ent.3 |
httpd-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs |
before 0:2.0.46-32.ent.3 | 0:2.0.46-32.ent.3 |
httpd-develRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs |
before 0:2.0.46-32.ent.3 | 0:2.0.46-32.ent.3 |
mod_sslRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs |
before 1:2.0.46-32.ent.3 | 1:2.0.46-32.ent.3 |
httpdRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs |
before 0:2.0.46-32.ent.3 | 0:2.0.46-32.ent.3 |
httpd-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs |
before 0:2.0.46-32.ent.3 | 0:2.0.46-32.ent.3 |
httpd-develRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs |
before 0:2.0.46-32.ent.3 | 0:2.0.46-32.ent.3 |
mod_sslRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs |
before 1:2.0.46-32.ent.3 | 1:2.0.46-32.ent.3 |
jabberdRed Hat:network_proxy:4.2::el3 From an advisory covering 12 CVEs |
before 0:2.0s10-3.37.rhn | 0:2.0s10-3.37.rhn |
rhn-apacheRed Hat:network_proxy:4.2::el3 From an advisory covering 12 CVEs |
before 0:1.3.27-36.rhn.rhel3 | 0:1.3.27-36.rhn.rhel3 |
rhn-modperlRed Hat:network_proxy:4.2::el3 From an advisory covering 12 CVEs |
before 0:1.29-16.rhel3 | 0:1.29-16.rhel3 |
jabberdRed Hat:network_proxy:4.2::el4 From an advisory covering 12 CVEs |
before 0:2.0s10-3.38.rhn | 0:2.0s10-3.38.rhn |
rhn-apacheRed Hat:network_proxy:4.2::el4 From an advisory covering 12 CVEs |
before 0:1.3.27-36.rhn.rhel4 | 0:1.3.27-36.rhn.rhel4 |
rhn-modperlRed Hat:network_proxy:4.2::el4 From an advisory covering 12 CVEs |
before 0:1.29-16.rhel4 | 0:1.29-16.rhel4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-0488 is a high vulnerability (CVSS 7.5) in Apache Http Server, published May 28, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 37.7%, the 98th percentile. Fixed in apache2 2.0.50-1.
References
trustix.net/errata/2004/0031
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11458
mandriva.com/security/advisories?name=MDKSA-2004:054
redhat.com/support/errata/RHSA-2004-342.html
rhn.redhat.com/errata/RHSA-2004-245.html
security.gentoo.org/glsa/glsa-200406-05.xml
Show 100 moreShow less
marc.info?l=bugtraq&m=108567431823750&w=2
lists.grok.org.uk/pipermail/full-disclosure/2004-May/021610.html
securityfocus.com/bid/10355
debian.org/security/2004/dsa-532
bugzilla.fedora.us/show_bug.cgi?id=1888
exchange.xforce.ibmcloud.com/vulnerabilities/16214
lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E
nvd.nist.gov/vuln/detail/CVE-2004-0488
github.com/advisories/GHSA-cwr4-7j4w-3vv9
docs.bell-sw.com/security/cves/CVE-2004-0488
security-tracker.debian.org/tracker/CVE-2004-0488
access.redhat.com/errata/RHSA-2004:342
apacheweek.com/features/security-20
bugzilla.redhat.com/show_bug.cgi?id=125046
security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_342.json
cve.org/CVERecord?id=CVE-2004-0488