CVE-2004-0493
Medium
Description
The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error leading to a heap-based buffer overflow on 64 bit systems, via long header lines with large numbers of space or tab characters.
SeverityMedium
CVSS6.4
Exploit probability100. percentile84.8%
Product
Apache Http Server
PublishedAug 6, 2004
First seenAug 6, 2004
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apache http_server | 2.0.47, 2.0.48, 2.0.49 | — |
| avaya converged_communications_server | 2.0 | — |
| gentoo linux | 1.4 | — |
| trustix secure_linux | 1.5, 2.0, 2.1 | — |
| ibm http_server | 2.0.42, 2.0.42.1, 2.0.42.2, 2.0.47, 2.0.47.1 | — |
| avaya s8300 | r2.0.0 | — |
| avaya s8500 | r2.0.0 | — |
| avaya s8700 | r2.0.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.