CVE-2003-0542: Apache HTTP Server

High severity, CVSS 7.2. EPSS: 30.4% chance of exploitation in the next 30 days.

Multiple stack-based buffer overflows in (1) mod_alias and (2) mod_rewrite for Apache before 1.3.29 allow attackers to create configuration files to cause a denial of service (crash) or execute arbitrary code via a regular expression with more than 9 captures.

Affected products

• Apache HTTP Server: version 1.3 only; version 1.3.1 only; version 1.3.3 only; version 1.3.4 only; version 1.3.6 only; version 1.3.9 only; …

Published 2003-11-03. Last modified 2026-06-16.