JVN/CVE Demo: Cveinfos

CVE

Id: 13934
CVE No.: CVE-2005-2728
Status: Candidate
Description: The byte-range filter in Apache 2.0 before 2.0.54 allows remote attackers to cause a denial of service (memory consumption) via an HTTP header with a large Range field.
Phase: Assigned (20050829)
Votes: None (candidate not yet proposed)
Comments

Actions

Related CVE References

Id	CVE Id	CVE No.	Reference	Actions
102509	13934	CVE-2005-2728	CONFIRM:http://issues.apache.org/bugzilla/show_bug.cgi?id=29962	View
102510	13934	CVE-2005-2728	CONFIRM:http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm	View
102511	13934	CVE-2005-2728	DEBIAN:DSA-805	View
102512	13934	CVE-2005-2728	URL:http://www.debian.org/security/2005/dsa-805	View
102513	13934	CVE-2005-2728	GENTOO:GLSA-200508-15	View
102514	13934	CVE-2005-2728	URL:http://www.gentoo.org/security/en/glsa/glsa-200508-15.xml	View
102515	13934	CVE-2005-2728	HP:HPSBUX02074	View
102516	13934	CVE-2005-2728	URL:http://www.securityfocus.com/archive/1/archive/1/428138/100/0/threaded	View
102517	13934	CVE-2005-2728	HP:SSRT051251	View
102518	13934	CVE-2005-2728	URL:http://www.securityfocus.com/archive/1/archive/1/428138/100/0/threaded	View
102519	13934	CVE-2005-2728	MANDRIVA:MDKSA-2005:161	View
102520	13934	CVE-2005-2728	URL:http://www.mandriva.com/security/advisories?name=MDKSA-2005:161	View
102521	13934	CVE-2005-2728	REDHAT:RHSA-2005:608	View
102522	13934	CVE-2005-2728	URL:http://www.redhat.com/support/errata/RHSA-2005-608.html	View
102523	13934	CVE-2005-2728	SGI:20060101-01-U	View
102524	13934	CVE-2005-2728	URL:ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U	View
102525	13934	CVE-2005-2728	SUNALERT:102198	View
102526	13934	CVE-2005-2728	URL:http://sunsolve.sun.com/search/document.do?assetkey=1-26-102198-1	View
102527	13934	CVE-2005-2728	SUSE:SUSE-SA:2005:051	View
102528	13934	CVE-2005-2728	URL:http://www.novell.com/linux/security/advisories/2005_51_apache2.html	View
102529	13934	CVE-2005-2728	SUSE:SUSE-SA:2005:052	View
102530	13934	CVE-2005-2728	URL:http://www.novell.com/linux/security/advisories/2005_52_apache2.html	View
102531	13934	CVE-2005-2728	TRUSTIX:TSLSA-2005-0059	View
102532	13934	CVE-2005-2728	URL:http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html	View
102533	13934	CVE-2005-2728	UBUNTU:USN-177-1	View
102534	13934	CVE-2005-2728	URL:http://www.ubuntu.com/usn/usn-177-1	View
102535	13934	CVE-2005-2728	BID:14660	View
102536	13934	CVE-2005-2728	URL:http://www.securityfocus.com/bid/14660	View
102537	13934	CVE-2005-2728	OVAL:oval:org.mitre.oval:def:10017	View
102538	13934	CVE-2005-2728	URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10017	View
102539	13934	CVE-2005-2728	VUPEN:ADV-2006-0789	View
102540	13934	CVE-2005-2728	URL:http://www.vupen.com/english/advisories/2006/0789	View
102541	13934	CVE-2005-2728	OVAL:oval:org.mitre.oval:def:760	View
102542	13934	CVE-2005-2728	URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:760	View
102543	13934	CVE-2005-2728	OVAL:oval:org.mitre.oval:def:1246	View
102544	13934	CVE-2005-2728	URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1246	View
102545	13934	CVE-2005-2728	OVAL:oval:org.mitre.oval:def:1727	View
102546	13934	CVE-2005-2728	URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1727	View
102547	13934	CVE-2005-2728	SECUNIA:16559	View
102548	13934	CVE-2005-2728	URL:http://secunia.com/advisories/16559/	View
102549	13934	CVE-2005-2728	SECUNIA:16705	View
102550	13934	CVE-2005-2728	URL:http://secunia.com/advisories/16705	View
102551	13934	CVE-2005-2728	SECUNIA:16714	View
102552	13934	CVE-2005-2728	URL:http://secunia.com/advisories/16714	View
102553	13934	CVE-2005-2728	SECUNIA:16743	View
102554	13934	CVE-2005-2728	URL:http://secunia.com/advisories/16743	View
102555	13934	CVE-2005-2728	SECUNIA:16746	View
102556	13934	CVE-2005-2728	URL:http://secunia.com/advisories/16746	View
102557	13934	CVE-2005-2728	SECUNIA:16753	View
102558	13934	CVE-2005-2728	URL:http://secunia.com/advisories/16753	View
102559	13934	CVE-2005-2728	SECUNIA:16754	View
102560	13934	CVE-2005-2728	URL:http://secunia.com/advisories/16754	View
102561	13934	CVE-2005-2728	SECUNIA:16769	View
102562	13934	CVE-2005-2728	URL:http://secunia.com/advisories/16769	View
102563	13934	CVE-2005-2728	SECUNIA:16789	View
102564	13934	CVE-2005-2728	URL:http://secunia.com/advisories/16789	View
102565	13934	CVE-2005-2728	SECUNIA:16956	View
102566	13934	CVE-2005-2728	URL:http://secunia.com/advisories/16956	View
102567	13934	CVE-2005-2728	SECUNIA:17036	View
102568	13934	CVE-2005-2728	URL:http://secunia.com/advisories/17036	View
102569	13934	CVE-2005-2728	SECUNIA:17288	View
102570	13934	CVE-2005-2728	URL:http://secunia.com/advisories/17288	View
102571	13934	CVE-2005-2728	SECUNIA:17600	View
102572	13934	CVE-2005-2728	URL:http://secunia.com/advisories/17600	View
102573	13934	CVE-2005-2728	SECUNIA:17831	View
102574	13934	CVE-2005-2728	URL:http://secunia.com/advisories/17831	View
102575	13934	CVE-2005-2728	SECUNIA:17923	View
102576	13934	CVE-2005-2728	URL:http://secunia.com/advisories/17923	View
102577	13934	CVE-2005-2728	SECUNIA:18161	View
102578	13934	CVE-2005-2728	URL:http://secunia.com/advisories/18161	View
102579	13934	CVE-2005-2728	SECUNIA:18333	View
102580	13934	CVE-2005-2728	URL:http://secunia.com/advisories/18333	View
102581	13934	CVE-2005-2728	SECUNIA:18517	View
102582	13934	CVE-2005-2728	URL:http://secunia.com/advisories/18517	View
102583	13934	CVE-2005-2728	SECUNIA:19072	View
102584	13934	CVE-2005-2728	URL:http://secunia.com/advisories/19072	View
102585	13934	CVE-2005-2728	SREASON:604	View
102586	13934	CVE-2005-2728	URL:http://securityreason.com/securityalert/604	View
102587	13934	CVE-2005-2728	XF:apache-byterange-dos(22006)	View

Message	Memory use
Component initialization	1.39 MB
Controller action start	1.49 MB
Controller render start	2.38 MB
View render complete	2.91 MB

Message	Time in ms	Graph
Core Processing (Derived from $_SERVER["REQUEST_TIME"])	3.45
Event: Controller.initialize	0.03
Event: Controller.startup	0.08
Controller action	421.57
Event: Controller.beforeRender	4.54
» Processing toolbar data	4.42
Rendering View	23.83
» Event: View.beforeRender	0.02
» Rendering APP/View/Cveinfos/view.ctp	22.77
» Event: View.afterRender	0.02
» Event: View.beforeLayout	0.02
» Rendering APP/View/Layouts/default.ctp	0.61
» » Rendering CORE/Cake/View/Elements/sql_dump.ctp	0.09
Event: View.afterLayout	0.00

Constant	Value
APP	/virtual/inogo77/public_html/jvn/app/
APP_DIR	app
APPLIBS	/virtual/inogo77/public_html/jvn/app/Lib/
CACHE	/virtual/inogo77/public_html/jvn/app/tmp/cache/
CAKE	/virtual/inogo77/public_html/jvn/lib/Cake/
CAKE_CORE_INCLUDE_PATH	/virtual/inogo77/public_html/jvn/lib
CORE_PATH	/virtual/inogo77/public_html/jvn/lib/
CAKE_VERSION	2.6.0
CSS	/virtual/inogo77/public_html/jvn/app/webroot/css/
CSS_URL	css/
DS	/
FULL_BASE_URL	http://inogo77.s500.xrea.com
IMAGES	/virtual/inogo77/public_html/jvn/app/webroot/img/
IMAGES_URL	img/
JS	/virtual/inogo77/public_html/jvn/app/webroot/js/
JS_URL	js/
LOGS	/virtual/inogo77/public_html/jvn/app/tmp/logs/
ROOT	/virtual/inogo77/public_html/jvn
TESTS	/virtual/inogo77/public_html/jvn/app/Test/
TMP	/virtual/inogo77/public_html/jvn/app/tmp/
VENDORS	/virtual/inogo77/public_html/jvn/vendors/
WEBROOT_DIR	webroot
WWW_ROOT	/virtual/inogo77/public_html/jvn/app/webroot/

Environment Variable	Value
Php Version	5.6.40
Phprc	php56.ini
Php Fcgi Children	1
Pwd	/virtual/inogo77/public_html/.fast-cgi-bin
Php Fcgi Max Requests	10000
Shlvl	0
Path	/usr/local/bin:/usr/bin:/bin
Script Name	/jvn/app/webroot/index.php
Request Uri	/jvn/cveinfos/view/13934
Query String
Request Method	GET
Server Protocol	HTTP/1.1
Gateway Interface	CGI/1.1
Redirect Url	/jvn/app/webroot/cveinfos/view/13934
Remote Port	49626
Script Filename	/virtual/inogo77/public_html/jvn/app/webroot/index.php
Server Admin	[no address given]
Context Document Root	/virtual/inogo77/public_html
Context Prefix
Request Scheme	http
Document Root	/virtual/inogo77/public_html
Remote Addr	216.73.216.223
Server Port	80
Server Addr	160.251.151.205
Server Name	inogo77.s500.xrea.com
Server Software	Apache
Server Signature
Http Connection	close
Http Cache Control	max-age=259200
Http X Forwarded For	10.1.148.26
Http Via	1.1 squid-proxy-5b5d847c96-7f7gz (squid/6.13)
Http Host	inogo77.s500.xrea.com
Http Accept Encoding	gzip, br, zstd, deflate
Http User Agent	Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Http Accept	/
Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Suspectharddos	1
Suspectdos	1
X Dostranslated Ip	216.73.216.223
Mm Country Code	US
Mmdb Info	result found
Mmdb Addr	216.73.216.223
Unique Id	aOBeHwwT43etEcxRPs8e7wAAAao
Redirect Status	200
Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect Suspectharddos	1
Redirect Suspectdos	1
Redirect X Dostranslated Ip	216.73.216.223
Redirect Mm Country Code	US
Redirect Mmdb Info	result found
Redirect Mmdb Addr	216.73.216.223
Redirect Unique Id	aOBeHwwT43etEcxRPs8e7wAAAao
Redirect Redirect Status	200
Redirect Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect Redirect Suspectharddos	1
Redirect Redirect Suspectdos	1
Redirect Redirect X Dostranslated Ip	216.73.216.223
Redirect Redirect Mm Country Code	US
Redirect Redirect Mmdb Info	result found
Redirect Redirect Mmdb Addr	216.73.216.223
Redirect Redirect Unique Id	aOBeHwwT43etEcxRPs8e7wAAAao
Fcgi Role	RESPONDER
Php Self	/jvn/app/webroot/index.php
Request Time Float	1759534623.3368
Request Time	1759534623

CVE

Actions

Related CVE References

Related JVN

Request History

Session

Request

Cake Params

Post data

Query string

Cookie

Current Route

Sql Logs

default

Memory

Timers

Logs

View Variables

App Constants

CakePHP Constants

PHP Environment

Included Files

Include Paths

Included Files