Vulnerability in N/a
CVE-2004-0942
Apache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request with a MIME header containing multiple lines with a large number of space characters.
EPSS: 0.792 (99.1th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
References
- RHSA-2004:562 (x_refsource_REDHAT, vendor-advisory)
- support.avaya.com/elmodocs2/security/ASA-2006-081.htm (x_refsource_CONFIRM)
- 20041101 DoS in Apache 2.0.52 ? (mailing-list, x_refsource_FULLDISC)
- MDKSA-2004:135 (vendor-advisory, x_refsource_MANDRAKE)
- apache-http-get-dos(17930) (vdb-entry, x_refsource_XF)
- 19072 (x_refsource_SECUNIA, third-party-advisory)
- HPSBUX01123 (x_refsource_HP, vendor-advisory)
- APPLE-SA-2005-08-15 (vendor-advisory, x_refsource_APPLE)
- 2004-0061 (vendor-advisory, x_refsource_TRUSTIX)
- SSRT4876 (x_refsource_HP, vendor-advisory)