Vulnerability in N/a
CVE-2004-0751
The char_buffer_read function in the mod_ssl module for Apache 2.x, when using reverse proxying to an SSL server, allows remote attackers to cause a denial of service (segmentation fault).
EPSS: 0.697 (99.3th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
Public proof-of-concept exploits
References
- RHSA-2004:463 (x_refsource_REDHAT, vendor-advisory)
- SUSE-SA:2004:030 (vendor-advisory, x_refsource_SUSE)
- apache-modssl-speculative-dos(17273) (vdb-entry, x_refsource_XF)
- issues.apache.org/bugzilla/show_bug.cgi (x_refsource_CONFIRM)
- 2004-0047 (vendor-advisory, x_refsource_TRUSTIX)
- MDKSA-2004:096 (vendor-advisory, x_refsource_MANDRAKE)
- GLSA-200409-21 (vendor-advisory, x_refsource_GENTOO)
- oval:org.mitre.oval:def:11864 (signature, x_refsource_OVAL, vdb-entry)
- 20040911 Remote buffer overflow in Apache mod_ssl when reverse proxying SSL (mailing-list, x_refsource_BUGTRAQ)
- [httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html (mailing-list, x_refsource_MLIST)
Frequently asked questions
- What is CVE-2004-0751?
- CVE-2004-0751 is a vulnerability in N/a. Published 2004-09-10.
- Is CVE-2004-0751 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.