CVE-2004-0940 Apache HTTP Server Local Privilege Escalation

Critical Vulnerability Information CVE ID: CVE-2004-0940 CVSS 1.0 Base Score: 5.6 - Access Vector: Local - Access Complexity: High - Authentication Required: None - Confidentiality Impact: Complete - Integrity Impact: Complete - Availability Impact: Complete Consequences Privilege escalation Remediation Recommendations OpenPKG: Upgrade to the latest Apache package; specific versions are detailed in relevant security advisories. Slackware Linux: Upgrade to the latest Apache or mod_ssl package; refer to the mailing list for details. Gentoo Linux: Upgrade to Apache 1.3.32-r1 or later. Trustix Secure Linux: Upgrade to the latest Apache package. Mandrake Linux: Upgrade to the latest Apache package for the respective version. Debian GNU/Linux 3.0 (Woody): Upgrade to 1.3.26-0woody6 or later. Turbolinux: Upgrade to the latest Apache package. HP-UX: Apply appropriate patches for the respective version. Mac OS: Apply Security Update 2004-12-02. Red Hat Linux Stronghold: Refer to RHSA-2005:816-10 for patches, upgrades, or recommended workarounds. Other Distributions: Contact your vendor for upgrade or patch information. Affected Products (40) Various versions of Apache HTTP Server from 1.3 to 1.3.26 Dependent Products (50) Multiple versions of Apple Mac OS X and Server External Links (19) Links related to CVE-2004-0940 BID-11471 Apache official website slackware-security mailing list, etc.

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2004-0940 Apache HTTP Server Local Privilege Escalation