CVE ID:	CVE-2004-0700
Description:	Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for Apache before 1.3.31 may allow remote attackers to execute arbitrary messages via format string specifiers in certain log messages for HTTPS that are handled by the ssl_log function.
Test IDs:	1.3.6.1.4.1.25623.1.0.52339   1.3.6.1.4.1.25623.1.0.50554   1.3.6.1.4.1.25623.1.0.51165   1.3.6.1.4.1.25623.1.0.13651   1.3.6.1.4.1.25623.1.0.52799   1.3.6.1.4.1.25623.1.0.54625
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2004-0700 BugTraq ID: 10736 http://www.securityfocus.com/bid/10736 Bugtraq: 20040716 [OpenPKG-SA-2004.032] OpenPKG Security Advisory (apache) (Google Search) http://marc.info/?l=bugtraq&m=109005001205991&w=2 CERT/CC vulnerability note: VU#303448 http://www.kb.cert.org/vuls/id/303448 Conectiva Linux advisory: CLA-2004:857 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000857 Debian Security Information: DSA-532 (Google Search) http://www.debian.org/security/2004/dsa-532 https://bugzilla.fedora.us/show_bug.cgi?id=1888 http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:075 http://packetstormsecurity.org/0407-advisories/modsslFormat.txt http://virulent.siyahsapka.org/ http://marc.info/?l=apache-modssl&m=109001100906749&w=2 http://www.osvdb.org/7929 RedHat Security Advisories: RHSA-2004:405 http://www.redhat.com/support/errata/RHSA-2004-405.html RedHat Security Advisories: RHSA-2004:408 http://www.redhat.com/support/errata/RHSA-2004-408.html http://www.ubuntu.com/usn/usn-177-1 XForce ISS Database: apache-modssl-format-string(16705) https://exchange.xforce.ibmcloud.com/vulnerabilities/16705