CVE-2004-0493
Fixed in a distro release EPSS 85%
The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error leading to a heap-based buffer overflow on 64 bit systems, via long header lines with large numbers of space or tab characters.
Products: gentoo linux, trustix secure_linux, apache http_server, ibm http_server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | apache2 | 2.0.50-1 |
| Debian 13 | apache2 | 2.0.50-1 |
| Debian 14 | apache2 | 2.0.50-1 |
| Red Hat Enterprise Linux 3 | httpd | 0:2.0.46-32.ent.3 |
| Red Hat Enterprise Linux 3 | httpd-debuginfo | 0:2.0.46-32.ent.3 |
| Red Hat Enterprise Linux 3 | httpd-devel | 0:2.0.46-32.ent.3 |
| Red Hat Enterprise Linux 3 | mod_ssl | 1:2.0.46-32.ent.3 |