CVE-2005-1344
Publication date 2 May 2005
Last updated 24 July 2024
Ubuntu priority
Buffer overflow in htdigest in Apache 2.0.52 may allow attackers to execute arbitrary code via a long realm argument. NOTE: since htdigest is normally only locally accessible and not setuid or setgid, there are few attack vectors which would lead to an escalation of privileges, unless htdigest is executed from a CGI program. Therefore this may not be a vulnerability.
Status
Package | Ubuntu Release | Status |
---|---|---|
apache | 7.04 feisty |
Not affected
|
6.10 edgy |
Not affected
|
|
6.06 LTS dapper |
Not affected
|
|
apache2 | 7.04 feisty |
Fixed 2.2.3-3.2ubuntu0.1
|
6.10 edgy |
Fixed 2.0.55-4ubuntu4.1
|
|
6.06 LTS dapper |
Fixed 2.0.55-4ubuntu2.2
|