Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2004-0748
HistoryOct 20, 2004 - 4:00 a.m.

CVE-2004-0748

2004-10-2004:00:00
CWE-835
mitre
web.nvd.nist.gov
44
apache
mod_ssl
cve-2004-0748
denial of service
nvd

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

7.3

Confidence

High

EPSS

0.125

Percentile

95.5%

JSON

mod_ssl in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (CPU consumption) by aborting an SSL connection in a way that causes an Apache child process to enter an infinite loop.

Affected configurations

Nvd
Node
apachehttp_serverRange2.0.35–2.0.51
VendorProductVersionCPE
apachehttp_server*cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*

References

Related

debiancve 1
checkpoint_advisories 1
cvelist 1
httpd 1
nvd 1
ubuntucve 1
redhat 1
openvas 9
freebsd 1
nessus 11
securityvulns 2
gentoo 1
suse 1
debiancve
debiancve
CVE-2004-0748
2004-10-20 04:00:00
checkpoint_advisories
checkpoint_advisories
Apache 2 mod_ssl Connection Abort Denial of Service possible attack - Ver2 (CVE-2004-0748)
2014-12-28 00:00:00
cvelist
cvelist
CVE-2004-0748
2004-09-10 04:00:00
httpd
httpd
Apache Httpd < 2.0.51 : SSL connection infinite loop
2004-07-07 00:00:00
nvd
nvd
CVE-2004-0748
2004-10-20 04:00:00
ubuntucve
ubuntucve
CVE-2004-0748
2004-10-20 00:00:00
redhat
redhat
(RHSA-2004:349) httpd security update
2004-09-01 00:00:00
openvas
openvas
SLES9: Security update for Apache 2
2009-10-10 00:00:00
FreeBSD Ports: apache
2008-09-04 00:00:00
FreeBSD Ports: apache
2008-09-04 00:00:00
freebsd
freebsd
apache2 -- SSL remote DoS
2004-07-07 00:00:00
nessus
nessus
FreeBSD : apache2 -- SSL remote DoS (16)
2004-10-27 00:00:00
Apache 2.x < 2.0.50 Multiple Remote DoS
2004-06-29 00:00:00
SUSE-SA:2004:030: apache2
2004-09-06 00:00:00
securityvulns
securityvulns
MDKSA-2004:096 - Updated apache2 packages fix multiple vulnerabilities
2004-09-16 00:00:00
[ANNOUNCE] Apache HTTP Server 2.0.51 Released
2004-09-16 00:00:00
gentoo
gentoo
Apache 2, mod_dav: Multiple vulnerabilities
2004-09-16 00:00:00
suse
suse
remote DoS condition in apache2
2004-09-06 13:51:41

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

7.3

Confidence

High

EPSS

0.125

Percentile

95.5%

JSON
Related for CVE-2004-0748
debiancve1checkpoint_advisories1cvelist1httpd1nvd1ubuntucve1redhat1openvas9freebsd1nessus11securityvulns2gentoo1suse1