Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2005-2728HistoryAug 30, 2005 - 11:45 a.m.
CVE-2005-2728
2005-08-3011:45:00
Debian Security Bug Tracker
security-tracker.debian.org
11
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.94 High
EPSS
Percentile
99.1%
The byte-range filter in Apache 2.0 before 2.0.54 allows remote attackers to cause a denial of service (memory consumption) via an HTTP header with a large Range field.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | apache2 | < 2.0.54-5 | apache2_2.0.54-5_all.deb |
| Debian | 11 | all | apache2 | < 2.0.54-5 | apache2_2.0.54-5_all.deb |
| Debian | 10 | all | apache2 | < 2.0.54-5 | apache2_2.0.54-5_all.deb |
| Debian | 999 | all | apache2 | < 2.0.54-5 | apache2_2.0.54-5_all.deb |
| Debian | 13 | all | apache2 | < 2.0.54-5 | apache2_2.0.54-5_all.deb |
Related
checkpoint_advisories
checkpoint_advisories
Apache Byte-Range Filter Denial of Service (CVE-2005-2728)
2010-07-25 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200508-15 (apache)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200508-15 (apache)
2008-09-24 00:00:00
SLES9: Security update for Apache2
2009-10-10 00:00:00
ubuntucve
ubuntucve
CVE-2005-2728
2005-08-30 00:00:00
httpd
httpd
Apache Httpd < 2.0.55 : Byterange filter DoS
2005-07-07 00:00:00
gentoo
gentoo
Apache 2.0: Denial of Service vulnerability
2005-08-25 00:00:00
nessus
nessus
GLSA-200508-15 : Apache 2.0: Denial of Service vulnerability
2005-08-30 00:00:00
CentOS 3 / 4 : httpd (CESA-2005:608)
2006-07-03 00:00:00
Mandrake Linux Security Advisory : apache2 (MDKSA-2005:161)
2005-10-05 00:00:00
cve
cve
CVE-2005-2728
2005-08-30 11:45:00
redhat
redhat
(RHSA-2005:608) httpd security update
2005-09-06 00:00:00
centos
centos
httpd, mod_ssl security update
2005-09-06 15:58:02
suse
suse
local command execution, authentication bypass, in apache2
2005-09-16 12:34:21
local command execution, authentication bypass, in apache2
2005-09-12 13:00:50
osv
osv
apache2 - several
2005-09-08 00:00:00
debian
debian
[SECURITY] [DSA 805-1] New Apache2 packages fix several vulnerabilities
2005-09-08 18:07:44
[SECURITY] [DSA 805-1] New Apache2 packages fix several vulnerabilities
2005-09-08 18:07:44
ubuntu
ubuntu
Apache 2 vulnerabilities
2005-09-07 00:00:00
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.94 High
EPSS
Percentile
99.1%
Related for DEBIANCVE:CVE-2005-2728