{"api_version":"1","generated_at":"2026-07-23T21:40:36+00:00","cve":"CVE-2004-0700","urls":{"html":"https://cve.report/CVE-2004-0700","api":"https://cve.report/api/cve/CVE-2004-0700.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2004-0700","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2004-0700"},"summary":{"title":"CVE-2004-0700","description":"Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for Apache before 1.3.31 may allow remote attackers to execute arbitrary messages via format string specifiers in certain log messages for HTTPS that are handled by the ssl_log function.","state":"PUBLISHED","assigner":"mitre","published_at":"2004-07-27 04:00:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.redhat.com/support/errata/RHSA-2004-408.html","name":"http://www.redhat.com/support/errata/RHSA-2004-408.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"redhat.com | Red Hat Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://virulent.siyahsapka.org/","name":"http://virulent.siyahsapka.org/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://packetstormsecurity.org/0407-advisories/modsslFormat.txt","name":"http://packetstormsecurity.org/0407-advisories/modsslFormat.txt","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Files ≈ Packet Storm","mime":"text/plain","httpstatus":"200","archivestatus":"200"},{"url":"http://marc.info/?l=apache-modssl&m=109001100906749&w=2","name":"http://marc.info/?l=apache-modssl&m=109001100906749&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"'[ANNOUNCE] mod_ssl 2.8.19 for Apache 1.3.31' - MARC","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.ubuntu.com/usn/usn-177-1","name":"http://www.ubuntu.com/usn/usn-177-1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"usn/usn-177-1 - Ubuntu Linux","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://marc.info/?l=bugtraq&m=109005001205991&w=2","name":"http://marc.info/?l=bugtraq&m=109005001205991&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"'[OpenPKG-SA-2004.032] OpenPKG Security Advisory (apache)' - MARC","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.kb.cert.org/vuls/id/303448","name":"http://www.kb.cert.org/vuls/id/303448","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"],"title":"US-CERT Vulnerability Note VU#303448","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.debian.org/security/2004/dsa-532","name":"http://www.debian.org/security/2004/dsa-532","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Debian -- Security Information -- DSA-532-2 libapache-mod-ssl","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/7929","name":"http://www.osvdb.org/7929","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:075","name":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:075","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"404"},{"url":"http://www.securityfocus.com/bid/10736","name":"http://www.securityfocus.com/bid/10736","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Apache 'mod_ssl' Log Function Format String Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000857","name":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000857","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Home - Conectiva","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16705","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16705","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-405.html","name":"http://www.redhat.com/support/errata/RHSA-2004-405.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"redhat.com | Red Hat Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1888","name":"https://bugzilla.fedora.us/show_bug.cgi?id=1888","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"404"},{"url":"https://www.cve.org/CVERecord?id=CVE-2004-0700","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-0700","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2004","cve_id":"700","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"gentoo","cpe5":"linux","cpe6":"1.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"700","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mod_ssl","cpe5":"mod_ssl","cpe6":"2.3.11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"700","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mod_ssl","cpe5":"mod_ssl","cpe6":"2.4.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"700","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mod_ssl","cpe5":"mod_ssl","cpe6":"2.4.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"700","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mod_ssl","cpe5":"mod_ssl","cpe6":"2.4.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"700","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mod_ssl","cpe5":"mod_ssl","cpe6":"2.4.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"700","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mod_ssl","cpe5":"mod_ssl","cpe6":"2.4.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"700","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mod_ssl","cpe5":"mod_ssl","cpe6":"2.4.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"700","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mod_ssl","cpe5":"mod_ssl","cpe6":"2.4.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"700","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mod_ssl","cpe5":"mod_ssl","cpe6":"2.4.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"700","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mod_ssl","cpe5":"mod_ssl","cpe6":"2.4.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"700","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mod_ssl","cpe5":"mod_ssl","cpe6":"2.4.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"700","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mod_ssl","cpe5":"mod_ssl","cpe6":"2.4.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"700","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mod_ssl","cpe5":"mod_ssl","cpe6":"2.5.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"700","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mod_ssl","cpe5":"mod_ssl","cpe6":"2.5.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"700","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mod_ssl","cpe5":"mod_ssl","cpe6":"2.6.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"700","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mod_ssl","cpe5":"mod_ssl","cpe6":"2.6.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"700","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mod_ssl","cpe5":"mod_ssl","cpe6":"2.6.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"700","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mod_ssl","cpe5":"mod_ssl","cpe6":"2.6.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"700","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mod_ssl","cpe5":"mod_ssl","cpe6":"2.6.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"700","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mod_ssl","cpe5":"mod_ssl","cpe6":"2.6.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"700","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mod_ssl","cpe5":"mod_ssl","cpe6":"2.6.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"700","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mod_ssl","cpe5":"mod_ssl","cpe6":"2.7.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"700","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mod_ssl","cpe5":"mod_ssl","cpe6":"2.7.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"700","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mod_ssl","cpe5":"mod_ssl","cpe6":"2.8.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"700","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mod_ssl","cpe5":"mod_ssl","cpe6":"2.8.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"700","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mod_ssl","cpe5":"mod_ssl","cpe6":"2.8.1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"700","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mod_ssl","cpe5":"mod_ssl","cpe6":"2.8.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"700","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mod_ssl","cpe5":"mod_ssl","cpe6":"2.8.12","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"700","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mod_ssl","cpe5":"mod_ssl","cpe6":"2.8.14","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"700","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mod_ssl","cpe5":"mod_ssl","cpe6":"2.8.15","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"700","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mod_ssl","cpe5":"mod_ssl","cpe6":"2.8.16","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"700","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mod_ssl","cpe5":"mod_ssl","cpe6":"2.8.17","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"700","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mod_ssl","cpe5":"mod_ssl","cpe6":"2.8.18","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"700","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mod_ssl","cpe5":"mod_ssl","cpe6":"2.8.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"700","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mod_ssl","cpe5":"mod_ssl","cpe6":"2.8.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"700","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mod_ssl","cpe5":"mod_ssl","cpe6":"2.8.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"700","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mod_ssl","cpe5":"mod_ssl","cpe6":"2.8.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"700","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mod_ssl","cpe5":"mod_ssl","cpe6":"2.8.5.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"700","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mod_ssl","cpe5":"mod_ssl","cpe6":"2.8.5.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"700","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mod_ssl","cpe5":"mod_ssl","cpe6":"2.8.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"700","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mod_ssl","cpe5":"mod_ssl","cpe6":"2.8.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"700","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mod_ssl","cpe5":"mod_ssl","cpe6":"2.8.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"700","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mod_ssl","cpe5":"mod_ssl","cpe6":"2.8.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-08T00:24:27.061Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"http://virulent.siyahsapka.org/"},{"name":"7929","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/7929"},{"name":"USN-177-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"http://www.ubuntu.com/usn/usn-177-1"},{"name":"10736","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/10736"},{"name":"RHSA-2004:405","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://www.redhat.com/support/errata/RHSA-2004-405.html"},{"name":"apache-modssl-format-string(16705)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16705"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://packetstormsecurity.org/0407-advisories/modsslFormat.txt"},{"name":"CLA-2004:857","tags":["vendor-advisory","x_refsource_CONECTIVA","x_transferred"],"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000857"},{"name":"MDKSA-2004:075","tags":["vendor-advisory","x_refsource_MANDRAKE","x_transferred"],"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:075"},{"name":"DSA-532","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"],"url":"http://www.debian.org/security/2004/dsa-532"},{"name":"RHSA-2004:408","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://www.redhat.com/support/errata/RHSA-2004-408.html"},{"name":"FLSA:1888","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"],"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1888"},{"name":"[apache-modssl] 20040716  [ANNOUNCE] mod_ssl 2.8.19 for Apache 1.3.31","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://marc.info/?l=apache-modssl&m=109001100906749&w=2"},{"name":"VU#303448","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred"],"url":"http://www.kb.cert.org/vuls/id/303448"},{"name":"20040716 [OpenPKG-SA-2004.032] OpenPKG Security Advisory (apache)","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=109005001205991&w=2"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2004-07-16T00:00:00.000Z","descriptions":[{"lang":"en","value":"Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for Apache before 1.3.31 may allow remote attackers to execute arbitrary messages via format string specifiers in certain log messages for HTTPS that are handled by the ssl_log function."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-07-10T14:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_MISC"],"url":"http://virulent.siyahsapka.org/"},{"name":"7929","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/7929"},{"name":"USN-177-1","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"http://www.ubuntu.com/usn/usn-177-1"},{"name":"10736","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/10736"},{"name":"RHSA-2004:405","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://www.redhat.com/support/errata/RHSA-2004-405.html"},{"name":"apache-modssl-format-string(16705)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16705"},{"tags":["x_refsource_MISC"],"url":"http://packetstormsecurity.org/0407-advisories/modsslFormat.txt"},{"name":"CLA-2004:857","tags":["vendor-advisory","x_refsource_CONECTIVA"],"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000857"},{"name":"MDKSA-2004:075","tags":["vendor-advisory","x_refsource_MANDRAKE"],"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:075"},{"name":"DSA-532","tags":["vendor-advisory","x_refsource_DEBIAN"],"url":"http://www.debian.org/security/2004/dsa-532"},{"name":"RHSA-2004:408","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://www.redhat.com/support/errata/RHSA-2004-408.html"},{"name":"FLSA:1888","tags":["vendor-advisory","x_refsource_FEDORA"],"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1888"},{"name":"[apache-modssl] 20040716  [ANNOUNCE] mod_ssl 2.8.19 for Apache 1.3.31","tags":["mailing-list","x_refsource_MLIST"],"url":"http://marc.info/?l=apache-modssl&m=109001100906749&w=2"},{"name":"VU#303448","tags":["third-party-advisory","x_refsource_CERT-VN"],"url":"http://www.kb.cert.org/vuls/id/303448"},{"name":"20040716 [OpenPKG-SA-2004.032] OpenPKG Security Advisory (apache)","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://marc.info/?l=bugtraq&m=109005001205991&w=2"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2004-0700","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for Apache before 1.3.31 may allow remote attackers to execute arbitrary messages via format string specifiers in certain log messages for HTTPS that are handled by the ssl_log function."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://virulent.siyahsapka.org/","refsource":"MISC","url":"http://virulent.siyahsapka.org/"},{"name":"7929","refsource":"OSVDB","url":"http://www.osvdb.org/7929"},{"name":"USN-177-1","refsource":"UBUNTU","url":"http://www.ubuntu.com/usn/usn-177-1"},{"name":"10736","refsource":"BID","url":"http://www.securityfocus.com/bid/10736"},{"name":"RHSA-2004:405","refsource":"REDHAT","url":"http://www.redhat.com/support/errata/RHSA-2004-405.html"},{"name":"apache-modssl-format-string(16705)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16705"},{"name":"http://packetstormsecurity.org/0407-advisories/modsslFormat.txt","refsource":"MISC","url":"http://packetstormsecurity.org/0407-advisories/modsslFormat.txt"},{"name":"CLA-2004:857","refsource":"CONECTIVA","url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000857"},{"name":"MDKSA-2004:075","refsource":"MANDRAKE","url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:075"},{"name":"DSA-532","refsource":"DEBIAN","url":"http://www.debian.org/security/2004/dsa-532"},{"name":"RHSA-2004:408","refsource":"REDHAT","url":"http://www.redhat.com/support/errata/RHSA-2004-408.html"},{"name":"FLSA:1888","refsource":"FEDORA","url":"https://bugzilla.fedora.us/show_bug.cgi?id=1888"},{"name":"[apache-modssl] 20040716  [ANNOUNCE] mod_ssl 2.8.19 for Apache 1.3.31","refsource":"MLIST","url":"http://marc.info/?l=apache-modssl&m=109001100906749&w=2"},{"name":"VU#303448","refsource":"CERT-VN","url":"http://www.kb.cert.org/vuls/id/303448"},{"name":"20040716 [OpenPKG-SA-2004.032] OpenPKG Security Advisory (apache)","refsource":"BUGTRAQ","url":"http://marc.info/?l=bugtraq&m=109005001205991&w=2"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2004-0700","datePublished":"2004-07-21T04:00:00.000Z","dateReserved":"2004-07-19T00:00:00.000Z","dateUpdated":"2024-08-08T00:24:27.061Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2004-07-27 04:00:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.3.11:*:*:*:*:*:*:*","matchCriteriaId":"2B29D8AB-D664-4AF1-8967-03572ECBBA38"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"E78D69A6-3F25-4048-8739-E8A064C5614D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"0229B381-1AD6-4AEC-8B94-0D2AF77DC60A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"E257E1DB-C60A-4BD4-9FE9-F3D784D30BEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"8FC3770C-D06D-496D-8F28-9A4036B498E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"AC894E0F-1CC9-43BF-8E83-673034BB0211"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"ABA6F650-DDBD-4A93-A4AF-73A07F362BBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"3234A39B-79B9-4A41-A72F-8FD1477E21C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"C4A08F3D-CAB6-4F10-B7E3-6580FB2A6CA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"8B9C8865-9A18-4507-B9E3-48F4F19C18EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"F57A822D-E474-49B1-A262-BDA9829ED2CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.4.10:*:*:*:*:*:*:*","matchCriteriaId":"049AADD4-CBBB-4CA3-8105-D3D94649C6BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"67FCB442-61F5-42B3-849D-70638627B7CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"8F910BD4-B1C5-458B-9540-8F9E32C1FC7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"2DC707E0-4F4D-45C2-86C4-F6764668FDB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"61731D0A-2C38-4C2A-8FC0-0634D7EFA0E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"92D81C48-613B-4021-95A9-F049CDC63E23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"1D73CD68-2C38-4FE8-9ABE-5558E7BF135B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"C1B98B05-AEE6-4753-B3F3-8B09DE91985B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"E3061E09-41FD-4477-B8DA-AA019F63C5F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"F810E15C-61CF-40D0-9F40-12B1A65F8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"3BDE0520-8E51-4DFF-8CA2-5EF32281DD15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"BB888875-1AFC-4569-B783-CDE92B717882"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"FD6F68B8-B03D-43F9-BD40-1C30829597A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"C39E94EF-FEF4-41CA-BCD5-F3273D40D0F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"5778FC41-73B9-46E8-8A75-1BB09D36D081"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"08A7DE9F-3088-445E-A09A-FC8E155C4E95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"3906A1FB-3105-4248-B9D2-B915AEF90E9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"F1DB98C0-A15B-4186-8DAC-D906ABBEC2F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.8.5:*:*:*:*:*:*:*","matchCriteriaId":"15B615EC-D5AF-4C62-AF0A-453F7FD11DAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.8.5.1:*:*:*:*:*:*:*","matchCriteriaId":"A56EBBAA-30C7-4872-9966-F2DA78FC4AC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.8.5.2:*:*:*:*:*:*:*","matchCriteriaId":"77AC8014-D4BE-498B-A684-D2C2AA9CDB41"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.8.6:*:*:*:*:*:*:*","matchCriteriaId":"50211658-1959-4E97-9FF5-6ABAF3B98C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.8.7:*:*:*:*:*:*:*","matchCriteriaId":"CFC67365-5E6C-4BA2-B50F-5D6A6B3E7E72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.8.8:*:*:*:*:*:*:*","matchCriteriaId":"4A320B10-6961-4A6F-BE8E-B4C1E90C0291"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.8.9:*:*:*:*:*:*:*","matchCriteriaId":"6535C201-61AE-4C2F-950F-D55C554DF4DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.8.10:*:*:*:*:*:*:*","matchCriteriaId":"7E038ED0-981E-4107-A0CC-59CBCF32D618"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.8.12:*:*:*:*:*:*:*","matchCriteriaId":"7F857736-54C2-45DF-B93C-CA8152E433A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.8.14:*:*:*:*:*:*:*","matchCriteriaId":"01DDB4D6-07E4-4EF6-BF70-363543373003"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.8.15:*:*:*:*:*:*:*","matchCriteriaId":"A691D1FB-75BB-400A-994A-CFAC2C276085"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.8.16:*:*:*:*:*:*:*","matchCriteriaId":"E8D44D44-51B2-479E-BC44-128B4340A93E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.8.17:*:*:*:*:*:*:*","matchCriteriaId":"BAA93449-5248-45FB-AD18-F407BADBC500"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.8.18:*:*:*:*:*:*:*","matchCriteriaId":"D680A59D-4BA8-4F9B-95E5-49F15B6A1388"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*","matchCriteriaId":"65ED9D8C-604D-4B0B-A192-C0DA4D2E9AEB"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2004","CveId":"700","Ordinal":"1","Title":"CVE-2004-0700","CVE":"CVE-2004-0700","Year":"2004"},"notes":[{"CveYear":"2004","CveId":"700","Ordinal":"1","NoteData":"Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for Apache before 1.3.31 may allow remote attackers to execute arbitrary messages via format string specifiers in certain log messages for HTTPS that are handled by the ssl_log function.","Type":"Description","Title":"CVE-2004-0700"},{"CveYear":"2004","CveId":"700","Ordinal":"2","NoteData":"2004-07-21","Type":"Other","Title":"Published"},{"CveYear":"2004","CveId":"700","Ordinal":"3","NoteData":"2017-07-10","Type":"Other","Title":"Modified"}]}}}