Vulnerability in N/a
CVE-2005-2728
The byte-range filter in Apache 2.0 before 2.0.54 allows remote attackers to cause a denial of service (memory consumption) via an HTTP header with a large Range field.
EPSS: 0.618 (98.4th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
Public proof-of-concept exploits
References
- 16705 (x_refsource_SECUNIA, third-party-advisory)
- 14660 (vdb-entry, x_refsource_BID)
- RHSA-2005:608 (x_refsource_REDHAT, vendor-advisory)
- oval:org.mitre.oval:def:10017 (signature, x_refsource_OVAL, vdb-entry)
- 16743 (x_refsource_SECUNIA, third-party-advisory)
- 16753 (x_refsource_SECUNIA, third-party-advisory)
- support.avaya.com/elmodocs2/security/ASA-2006-081.htm (x_refsource_CONFIRM)
- TSLSA-2005-0059 (vendor-advisory, x_refsource_TRUSTIX)
- SUSE-SA:2005:051 (vendor-advisory, x_refsource_SUSE)
- 17831 (x_refsource_SECUNIA, third-party-advisory)
Frequently asked questions
- What is CVE-2005-2728?
- CVE-2005-2728 is a vulnerability in N/a. Published 2005-08-29.
- Is CVE-2005-2728 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.