CVEvulnerability

CVE-2004-0493

6.4 MEDIUM Published 2004-08-06 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2004-08-06
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.4 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:P

Description

The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error leading to a heap-based buffer overflow on 64 bit systems, via long header lines with large numbers of space or tab characters.

Affected configurations

• avaya converged communications server 2.0 • gentoo linux 1.4 • trustix secure linux 1.5 • trustix secure linux 2.0 • trustix secure linux 2.1 • apache http server 2.0.47 • apache http server 2.0.48 • apache http server 2.0.49 • ibm http server 2.0.42 • ibm http server 2.0.42.1 • ibm http server 2.0.42.2 • ibm http server 2.0.47 • ibm http server 2.0.47.1 • avaya s8300 r2.0.0 • avaya s8500 r2.0.0 • avaya s8700 r2.0.0

References