CVE-2003-1171: Mod Security

High severity, CVSS 7.5. EPSS: 4.6% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the sec_filter_out function in mod_security 1.7RC1 through 1.7.1 in Apache 2 allows remote attackers to execute arbitrary code via a server side script that sends a large amount of data.

Affected products

• Mod Security Mod Security: version 1.7 only; version 1.7.1 only

Published 2003-12-31. Last modified 2026-06-16.