CVE-2005-2728

Published: Aug 30, 2005Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The byte-range filter in Apache 2.0 before 2.0.54 allows remote attackers to cause a denial of service (memory consumption) via an HTTP header with a large Range field.

Affected (24)

Products: Apache: Http Server

Apache

1 product

Http Server

Configuration A

24 vulnerable

Vulnerable Software	Affected Versions
Apache Http Server	Version 2.0.28
Apache Http Server	Version 2.0.28 beta
Apache Http Server	Version 2.0.32
Apache Http Server	Version 2.0.35
Apache Http Server	Version 2.0.36
Apache Http Server	Version 2.0.37
Apache Http Server	Version 2.0.38
Apache Http Server	Version 2.0.39
Apache Http Server	Version 2.0.40
Apache Http Server	Version 2.0.41
Apache Http Server	Version 2.0.42
Apache Http Server	Version 2.0.43
Apache Http Server	Version 2.0.44
Apache Http Server	Version 2.0.45
Apache Http Server	Version 2.0.46
Apache Http Server	Version 2.0.47
Apache Http Server	Version 2.0.48
Apache Http Server	Version 2.0.49
Apache Http Server	Version 2.0.50
Apache Http Server	Version 2.0.51
Apache Http Server	Version 2.0.52
Apache Http Server	Version 2.0.53
Apache Http Server	Version 2.0.9
Apache Http Server	Version 2.0

References (104)

ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U (unsafe URL)

Source: cve@mitre.org

http://issues.apache.org/bugzilla/show_bug.cgi?id=29962

Source: cve@mitre.org

PatchVendor Advisory

http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html

Source: cve@mitre.org

http://secunia.com/advisories/16559/

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/16705

Source: cve@mitre.org

http://secunia.com/advisories/16714

Source: cve@mitre.org

http://secunia.com/advisories/16743

Source: cve@mitre.org

http://secunia.com/advisories/16746

Source: cve@mitre.org

http://secunia.com/advisories/16753

Source: cve@mitre.org

http://secunia.com/advisories/16754

Source: cve@mitre.org

http://secunia.com/advisories/16769

Source: cve@mitre.org

http://secunia.com/advisories/16789

Source: cve@mitre.org

http://secunia.com/advisories/16956

Source: cve@mitre.org

http://secunia.com/advisories/17036

Source: cve@mitre.org

http://secunia.com/advisories/17288

Source: cve@mitre.org

http://secunia.com/advisories/17600

Source: cve@mitre.org

http://secunia.com/advisories/17831

Source: cve@mitre.org

http://secunia.com/advisories/17923

Source: cve@mitre.org

http://secunia.com/advisories/18161

Source: cve@mitre.org

http://secunia.com/advisories/18333

Source: cve@mitre.org

http://secunia.com/advisories/18517

Source: cve@mitre.org

http://secunia.com/advisories/19072

Source: cve@mitre.org

http://securityreason.com/securityalert/604

Source: cve@mitre.org

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102198-1

Source: cve@mitre.org

http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm

Source: cve@mitre.org

http://www.debian.org/security/2005/dsa-805

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-200508-15.xml

Source: cve@mitre.org

PatchVendor Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2005:161

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2005_51_apache2.html

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2005_52_apache2.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2005-608.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/428138/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/14660

Source: cve@mitre.org

Patch

http://www.ubuntu.com/usn/usn-177-1

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/0789

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/22006

Source: cve@mitre.org

https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/r652fc951306cdeca5a276e2021a34878a76695a9f3cfb6490b4a6840%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/rafd145ba6cd0a4ced113a5823cdaff45aeb36eb09855b216401c66d6%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/reb542d2038e9c331506e0cbff881b47e40fbe2bd93ff00979e60cdf7%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10017

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1246

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1727

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A760

Source: cve@mitre.org

ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U (unsafe URL)