CVE-2004-0809
Fixed in a distro release EPSS 17%
The mod_dav module in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (child process crash) via a certain sequence of LOCK requests for a location that allows WebDAV authoring access.
Products: apache http_server, hp secure_web_server_for_tru64, gentoo linux, hp-ux, mandrakesoft mandrake_linux, redhat enterprise_linux, redhat enterprise_linux_desktop, trustix secure_linux, turbolinux_desktop, turbolinux_home, turbolinux_server, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | apache2 | 2.0.51-1 |
| Debian 13 | apache2 | 2.0.51-1 |
| Debian 14 | apache2 | 2.0.51-1 |
| Debian 3.0 | libapache-mod-dav | 1.0.3-3.1 |
| Red Hat Enterprise Linux 3 | httpd | 0:2.0.46-40.ent |
| Red Hat Enterprise Linux 3 | httpd-debuginfo | 0:2.0.46-40.ent |
| Red Hat Enterprise Linux 3 | httpd-devel | 0:2.0.46-40.ent |
| Red Hat Enterprise Linux 3 | mod_ssl | 1:2.0.46-40.ent |