CVE-2003-0842

CVE-2003-0842 describes a stack-based buffer overflow in mod_gzip 1.3.26.1a and earlier, specifically in the mod_gzip_printf function when debug mode is enabled. This vulnerability allows remote attackers to execute arbitrary code by sending a crafted GET request with a long filename and an "Accept-Encoding: gzip" header. With a CVSS score of 7.5, it is considered highly severe due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, an exploit is publicly available on ExploitDB, indicating its exploitability, though there is no evidence of active exploitation or significant community discussion.