$ cve CVE-2004-0493 JSON

CVE-2004-0493 EXPLOIT

6.4

MEDIUM · CVSS 2.0 · EPSS 84.8% (pctl 100)

Patch early

A public exploit exists.

Description

The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error leading to a heap-based buffer overflow on 64 bit systems, via long header lines with large numbers of space or tab characters.

Scoring

CVSS	6.4 (MEDIUM, v2.0)
Vector	AV:N/AC:L/Au:N/C:N/I:P/A:P
EPSS	84.78% — more likely to be exploited than 100% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2004-08-06
Last modified	2026-06-16

Affected (8)

Vendor	Product
apache	http server
avaya	converged communications server
avaya	s8300
avaya	s8500
avaya	s8700
gentoo	linux
ibm	http server
trustix	secure linux

Public exploits

Source	Title	Date
exploit-db	Apache - Arbitrary Long HTTP Headers Denial of Service	2004-08-02
exploit-db	Apache - Arbitrary Long HTTP Headers (Denial of Service)	2004-07-22

References

→ the Explorer · watch your stack · NVD