Vulnerability in Apache Http_server

CVE-2004-0751

The char_buffer_read function in the mod_ssl module for Apache 2.x, when using reverse proxying to an SSL server, allows remote attackers to cause a denial of service (segmentation fault).

EPSS: 0.697 (99.3th percentile) — read the EPSS interpretation.

Affected products

Public proof-of-concept exploits

References

  • cve@mitre.org (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
  • cve@mitre.org (vendor-advisory, Broken Link, x_refsource_SUSE)
  • cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_XF)
  • cve@mitre.org (x_refsource_CONFIRM, Patch, Issue Tracking, Vendor Advisory)
  • cve@mitre.org (vendor-advisory, x_refsource_TRUSTIX, Broken Link)
  • cve@mitre.org (vendor-advisory, x_refsource_MANDRAKE, Broken Link)
  • cve@mitre.org (vendor-advisory, Third Party Advisory, x_refsource_GENTOO)
  • cve@mitre.org (x_refsource_OVAL, signature, Third Party Advisory, vdb-entry)
  • cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, Broken Link)
  • cve@mitre.org (mailing-list, x_refsource_MLIST)

Frequently asked questions

What is CVE-2004-0751?
CVE-2004-0751 is a vulnerability in Apache Http_server. Published 2004-10-20.
Is CVE-2004-0751 known to be exploited?
2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.