Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2004-0493
HistoryAug 06, 2004 - 4:00 a.m.

CVE-2004-0493

2004-08-0604:00:00
NVD-CWE-Other
[email protected]
web.nvd.nist.gov
47
apache
httpd
denial of service
buffer overflow
vulnerability
cve-2004-0493
nvd

7 High

AI Score

Confidence

High

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

0.962 High

EPSS

Percentile

99.5%

JSON

The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error leading to a heap-based buffer overflow on 64 bit systems, via long header lines with large numbers of space or tab characters.

References

Related

securityvulns 2
nessus 8
openvas 6
ubuntucve 1
gentoo 1
checkpoint_advisories 1
debiancve 1
httpd 1
redhat 2
suse 1
securityvulns
securityvulns
TSSA-2004-012 - apache
2004-06-30 00:00:00
[Full-Disclosure] Advisory 11/2004: PHP memory_limit remote vulnerability
2004-07-14 00:00:00
nessus
nessus
GLSA-200407-03 : Apache 2: Remote denial of service attack
2004-08-30 00:00:00
Mandrake Linux Security Advisory : apache2 (MDKSA-2004:064)
2004-07-31 00:00:00
Apache 2.x < 2.0.50 Multiple Remote DoS
2004-06-29 00:00:00
openvas
openvas
Apache Input Header Folding and mod_ssl ssl_io_filter_cleanup DoS Vulnerabilities
2005-11-03 00:00:00
Gentoo Security Advisory GLSA 200407-03 (Apache)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200407-03 (Apache)
2008-09-24 00:00:00
ubuntucve
ubuntucve
CVE-2004-0493
2004-08-06 00:00:00
gentoo
gentoo
Apache 2: Remote denial of service attack
2004-07-04 00:00:00
checkpoint_advisories
checkpoint_advisories
Apache 2.0.x Input Header Folding Denial of Service (CVE-2004-0493)
2009-12-13 00:00:00
debiancve
debiancve
CVE-2004-0493
2004-08-06 04:00:00
httpd
httpd
Apache Httpd < 2.0.50 : Header parsing memory leak
2004-06-13 00:00:00
redhat
redhat
(RHSA-2004:342) httpd security update
2004-07-06 00:00:00
(RHSA-2004:392) php security update
2004-07-19 00:00:00
suse
suse
remote code execution in php4/mod_php4
2004-07-16 12:43:18

7 High

AI Score

Confidence

High

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

0.962 High

EPSS

Percentile

99.5%

JSON
Related for CVE-2004-0493
securityvulns2nessus8openvas6ubuntucve1gentoo1checkpoint_advisories1debiancve1httpd1redhat2suse1