CVE-2004-0493

The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer…

published June 30, 2004

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.7th percentile for exploit probability.

CVSS
—
EPSS
85%
Percentile
99.7
In the wild
Unconfirmed
What it is

The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error leading to a heap-based buffer overflow on 64 bit systems, via long header lines with large numbers of space or tab characters.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.84784 · 99.7th percentile
Published
2004-06-30T04:00Z
EPSS history
Timeline
  • 30 JUN 04:00Z
    The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer…
    cvelistv5