← Back

CVE-2004-2381

nvd nist
Published: Dec 31, 2004Modified: Apr 16, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:N/I:N/A:P
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

HttpRequest.java in Jetty HTTP Server before 4.2.19 allows remote attackers to cause denial of service (memory usage and application crash) via HTTP requests with a large Content-Length.

Affected (67)

1 product
Jetty Http Server
Configuration A
67 vulnerable
Vulnerable SoftwareAffected Versions
Jetty
Version 4.0.0
Version 4.0.1
Version 4.0.1_rc0
Version 4.0.1_rc1
Version 4.0.1_rc2
Version 4.0.2
Version 4.0.3
Version 4.0.4
Version 4.0.5
Version 4.0.6
Version 4.0.b0
Version 4.0.b1
Version 4.0.b2
Version 4.0.d0
Version 4.0.d1
Version 4.0.d2
Version 4.0.d3
Version 4.0.d4
Version 4.0_rc1
Version 4.0_rc2
Version 4.0_rc3
Version 4.1.0
Version 4.1.0_rc0
Version 4.1.0_rc1
Version 4.1.0_rc2
Version 4.1.0_rc3
Version 4.1.0_rc4
Version 4.1.0_rc5
Version 4.1.0_rc6
Version 4.1.1
Version 4.1.2
Version 4.1.3
Version 4.1.4
Version 4.1.b0
Version 4.1.b1
Version 4.1.d0
Version 4.1.d1
Version 4.1.d2
Version 4.2.0
Version 4.2.0_beta0
Version 4.2.0_rc0
Version 4.2.0_rc1
Version 4.2.10
Version 4.2.10_pre0
Version 4.2.10_pre1
Version 4.2.11
Version 4.2.12
Version 4.2.14
Version 4.2.14_rc0
Version 4.2.14_rc1
Version 4.2.15
Version 4.2.15_rc0
Version 4.2.16
Version 4.2.17
Version 4.2.18
Version 4.2.1
Version 4.2.2
Version 4.2.3
Version 4.2.4
Version 4.2.4_rc0
Version 4.2.5
Version 4.2.6
Version 4.2.7
Version 4.2.8_01
Version 4.2.9
Version 4.2.9_rc1
Version 4.2.9_rc2

References (12)

Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.