Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2004-0493

Опубликовано: 06 авг. 2004
Источник: nvd
CVSS2: 6.4
EPSS Высокий

Описание

The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error leading to a heap-based buffer overflow on 64 bit systems, via long header lines with large numbers of space or tab characters.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:h:avaya:converged_communications_server:2.0:*:*:*:*:*:*:*
cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*
cpe:2.3:o:trustix:secure_linux:1.5:*:*:*:*:*:*:*
cpe:2.3:o:trustix:secure_linux:2.0:*:*:*:*:*:*:*
cpe:2.3:o:trustix:secure_linux:2.1:*:*:*:*:*:*:*
Конфигурация 2

Одно из

cpe:2.3:a:apache:http_server:2.0.47:*:*:*:*:*:*:*
cpe:2.3:a:apache:http_server:2.0.48:*:*:*:*:*:*:*
cpe:2.3:a:apache:http_server:2.0.49:*:*:*:*:*:*:*
cpe:2.3:a:ibm:http_server:2.0.42:*:*:*:*:*:*:*
cpe:2.3:a:ibm:http_server:2.0.42.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:http_server:2.0.42.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:http_server:2.0.47:*:*:*:*:*:*:*
cpe:2.3:a:ibm:http_server:2.0.47.1:*:*:*:*:*:*:*
cpe:2.3:h:avaya:s8300:r2.0.0:*:*:*:*:*:*:*
cpe:2.3:h:avaya:s8500:r2.0.0:*:*:*:*:*:*:*
cpe:2.3:h:avaya:s8700:r2.0.0:*:*:*:*:*:*:*

EPSS

Процентиль: 99%
0.80814
Высокий

6.4 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

ubuntu
около 21 года назад

The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error leading to a heap-based buffer overflow on 64 bit systems, via long header lines with large numbers of space or tab characters.

redhat
около 21 года назад

The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error leading to a heap-based buffer overflow on 64 bit systems, via long header lines with large numbers of space or tab characters.

debian
около 21 года назад

The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows re ...

github
больше 3 лет назад

The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error leading to a heap-based buffer overflow on 64 bit systems, via long header lines with large numbers of space or tab characters.

EPSS

Процентиль: 99%
0.80814
Высокий

6.4 Medium

CVSS2

Дефекты

NVD-CWE-Other