CVE-2005-1344

Publication date 2 May 2005

Last updated 17 July 2025


Ubuntu priority

Buffer overflow in htdigest in Apache 2.0.52 may allow attackers to execute arbitrary code via a long realm argument. NOTE: since htdigest is normally only locally accessible and not setuid or setgid, there are few attack vectors which would lead to an escalation of privileges, unless htdigest is executed from a CGI program. Therefore this may not be a vulnerability.

Status

Package Ubuntu Release Status
apache 7.04 feisty
Not affected
6.10 edgy
Not affected
6.06 LTS dapper
Not affected
apache2 7.04 feisty
Fixed 2.2.3-3.2ubuntu0.1
6.10 edgy
Fixed 2.0.55-4ubuntu4.1
6.06 LTS dapper
Fixed 2.0.55-4ubuntu2.2

References

Related Ubuntu Security Notices (USN)

    • USN-120-1
    • Apache 2 vulnerability
    • 6 May 2005

Other references