CVE-2004-0940

Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as the apache user via SSI (XSSI) documents that trigger a length calculation error.

Date published : 2004-10-26

http://www.securityfocus.com/bid/11471

http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm