CVE-2004-0493

Published: Aug 6, 2004Modified: Apr 16, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:P

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error leading to a heap-based buffer overflow on 64 bit systems, via long header lines with large numbers of space or tab characters.

Affected (16)

Products: Avaya: Converged Communications Server, S8300, S8500, S8700 · Gentoo: Linux · Trustix: Secure Linux · +2 more

Show all products

Avaya: Converged Communications Server, S8300, S8500, S8700 · Gentoo: Linux · Trustix: Secure Linux · Apache: Http Server · Ibm: Http Server

4 products

Converged Communications Server

1 product

1 product

1 product

1 product

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Avaya Converged Communications Server	Version 2.0
Gentoo Linux	Version 1.4
Trustix Secure Linux	Version 1.5
Trustix Secure Linux	Version 2.0
Trustix Secure Linux	Version 2.1

Configuration B

11 vulnerable

Vulnerable Software	Affected Versions
Apache Http Server	Version 2.0.47
Apache Http Server	Version 2.0.48
Apache Http Server	Version 2.0.49
Avaya S8300	Version r2.0.0
Avaya S8500	Version r2.0.0
Avaya S8700	Version r2.0.0
Ibm Http Server	Version 2.0.42.1
Ibm Http Server	Version 2.0.42.2
Ibm Http Server	Version 2.0.42
Ibm Http Server	Version 2.0.47.1
Ibm Http Server	Version 2.0.47

References (48)

http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/023133.html

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=108853066800184&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=109181600614477&w=2

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200407-03.xml

Source: cve@mitre.org

http://www.apacheweek.com/features/security-20

Source: cve@mitre.org

http://www.guninski.com/httpd1.html

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2004:064

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2004-342.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/10619

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://www.trustix.org/errata/2004/0039/

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/16524

Source: cve@mitre.org

https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/r734a07156abf332d5ab27fb91d9d962cacfef4f3681e44056f064fa8%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10605

Source: cve@mitre.org

http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/023133.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=108853066800184&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=109181600614477&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-200407-03.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.apacheweek.com/features/security-20

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.guninski.com/httpd1.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2004:064

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2004-342.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/10619

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

http://www.trustix.org/errata/2004/0039/

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/16524

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.apache.org/thread.html/r734a07156abf332d5ab27fb91d9d962cacfef4f3681e44056f064fa8%40%3Ccvs.httpd.apache.org%3E

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10605

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.