CVE-2004-0488: Apache HTTP Server

High severity, CVSS 7.5. EPSS: 37.7% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN.

Affected products

• Apache HTTP Server: from 2.0.35, before 2.0.50 (fixed in 2.0.50)
• Debian Debian Linux: version 3.0 only
• Red Hat Enterprise Linux Server: version 2.0 only
• Red Hat Enterprise Linux Workstation: version 2.0 only

Published 2004-07-07. Last modified 2026-06-16.