CVEvulnerability

CVE-2004-0942

5.0 MEDIUM Published 2005-02-09 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-02-09
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P

Description

Apache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request with a MIME header containing multiple lines with a large number of space characters.

Affected configurations

• apache http server (<= 2.0.52)

Related

Referenced by CWE · observed example (1)

  • CWE-156 Improper Neutralization of Whitespace weakness

References