Tracker / CVE-2004-0493
CVE-2004-0493
Medium 6.4
The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error leading to a heap-based buffer overflow on 64 bit systems, via long header lines with large numbers of space or tab characters.
Affected products and versions
| apache | http_server |
|---|---|
| avaya | converged_communications_server |
| avaya | s8300 |
| avaya | s8500 |
| avaya | s8700 |
| gentoo | linux |
| ibm | http_server |
| trustix | secure_linux |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.