CVE-2004-0940

This exploit targets a buffer overflow vulnerability in the get_tag function of mod_include in Apache 1.3.x, allowing arbitrary code execution with the privileges of the httpd child process. The exploit generates a malicious HTML file that triggers the overflow when processed by the vulnerable Apache server.

This exploit targets a buffer overflow in Apache 1.3.x's mod_include module via a maliciously crafted HTML file. It leverages improper length validation in the get_tag function to execute arbitrary code (bind shell) with httpd privileges.