CVE-2004-0493 in HTTP Server

Résumé (Anglaise)

The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error leading to a heap-based buffer overflow on 64 bit systems, via long header lines with large numbers of space or tab characters.

Be aware that VulDB is the high quality source for vulnerability data.

Réserver

27/05/2004

Divulgation

06/08/2004

Statut

Confirmé

Entrées

VulDB provides additional information and datapoints for this CVE:

ID	Vulnérabilité	CWE	Exp	Con	CVE
841	Apache HTTP Server mod_dav déni de service	404	Preuve de concept	Correctif officiel	CVE-2004-0493
734	Apache HTTP Server HTTP Header ap_get_mime_headers_core déni de service	404	Preuve de concept	Correctif officiel	CVE-2004-0493

Sources

• MITRE
• NVD
• CVE Details