CVE:CVE-2004-0940
CNNVD:CNNVD-200502-029
mod_include是Apache标准模块允许用户在HTML中包含文件执行命令等。
mod_include get_tag()对用户提交输入缺少充分过滤，本地攻击者可以利用这个漏洞进行缓冲区溢出攻击。
问题是get_tag()函数存在缓冲区溢出问题，攻击者从handle_echo()函数可以触发，本地用户可以建立特殊的HTML，当Apache处理时，可能以httpd子进程权限执行任意代码。
solution:Upgrade apache http_server to a higher version than 1.3,1.3.1,1.3.3,1.3.4,1.3.6,1.3.7,1.3.9,1.3.11,1.3.12,1.3.14,1.3.17,1.3.18,1.3.19,1.3.20,1.3.22,1.3.23,1.3.24,1.3.25,1.3.26,1.3.27,1.3.28,1.3.29,1.3.31,1.3.32,and avoid the version 1.3,1.3.1,1.3.3,1.3.4,1.3.6,1.3.7,1.3.9,1.3.11,1.3.12,1.3.14,1.3.17,1.3.18,1.3.19,1.3.20,1.3.22,1.3.23,1.3.24,1.3.25,1.3.26,1.3.27,1.3.28,1.3.29,1.3.31,1.3.32; Upgrade openpkg openpkg to a higher version than 2.0,2.1,2.2,current,and avoid the version 2.0,2.1,2.2,current; Upgrade hp hp-ux to a higher version than 11.00,11.11,11.20,11.22,and avoid the version 11.00,11.11,11.20,11.22; Upgrade slackware slackware_linux to a higher version than 8.0,8.1,9.0,9.1,10.0,current,and avoid the version 8.0,8.1,9.0,9.1,10.0,current; Upgrade suse suse_linux to a higher version than 8.0,8.1,8.2,9.0,9.1,9.2,and avoid the version 8.0,8.1,8.2,9.0,9.1,9.2; Upgrade trustix secure_linux to a higher version than 1.5,and avoid the version 1.5