Lucene search

K
httpdApache Team FoundationHTTPD:3AC0C9DD33BF3754BEF3C59A5FE84DAA
HistoryJul 07, 2005 - 12:00 a.m.

Apache Httpd < 2.0.55 : Byterange filter DoS

2005-07-0700:00:00
Apache Team Foundation
httpd.apache.org
9

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.94 High

EPSS

Percentile

99.1%

A flaw in the byterange filter would cause some responses to be buffered into memory. If a server has a dynamic resource such as a CGI script or PHP script which generates a large amount of data, an attacker could send carefully crafted requests in order to consume resources, potentially leading to a Denial of Service.

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.94 High

EPSS

Percentile

99.1%