Back
CVE-2003-0843
Format string vulnerability in mod_gzip_printf for mod_gzip 1.3.26.1a and earlier, and possibly later official versions, when running in debug mode and using the Apache log, allows remote attackers to execute arbitrary code via format string characters in an HTTP GET request with an "Accept-Encoding: gzip" header.
Published: Nov 17, 2003
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (1)
| Vendor | Product | Version |
|---|---|---|
| dag_apt_repository | mod_gzip | * |
GitHub Security Advisory GHSA-m67q-f688-xmfm
Format string vulnerability in mod_gzip_printf for mod_gzip 1.3.26.1a and earlier, and possibly...
Risk Scores
CVSS Score
7.5 / 10
EPSS Score
2.27%
Top 19% most likely to be exploited
Threat Score
30.7 / 100
Data Sources
NVD
EPSS
GitHub