AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2004-0940

HIGH · CVSS 7.8 EPSS 4.83%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2005-02-09 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2004-0940
Severity
HIGH
CVSS
7.8
EPSS
4.83%
Apache

Original NVD Description

Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as the apache user via SSI (XSSI) documents that trigger a length calculation error.