CVE

Id
8921  
CVE No.
CVE-2004-0493  
Status
Candidate  
Description
The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error leading to a heap-based buffer overflow on 64 bit systems, via long header lines with large numbers of space or tab characters.  
Phase
Assigned (20040527)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
57085 8921 CVE-2004-0493 FULLDISC:20040628 DoS in apache httpd 2.0.49, yet still apache much better than windows  View
57086 8921 CVE-2004-0493 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/023133.html  View
57087 8921 CVE-2004-0493 MISC:http://www.guninski.com/httpd1.html  View
57088 8921 CVE-2004-0493 CONFIRM:http://www.apacheweek.com/features/security-20  View
57089 8921 CVE-2004-0493 BUGTRAQ:20040629 TSSA-2004-012 - apache  View
57090 8921 CVE-2004-0493 URL:http://marc.info/?l=bugtraq&m=108853066800184&w=2  View
57091 8921 CVE-2004-0493 GENTOO:GLSA-200407-03  View
57092 8921 CVE-2004-0493 URL:http://security.gentoo.org/glsa/glsa-200407-03.xml  View
57093 8921 CVE-2004-0493 HP:SSRT4777  View
57094 8921 CVE-2004-0493 URL:http://marc.info/?l=bugtraq&m=109181600614477&w=2  View
57095 8921 CVE-2004-0493 MANDRAKE:MDKSA-2004:064  View
57096 8921 CVE-2004-0493 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2004:064  View
57097 8921 CVE-2004-0493 REDHAT:RHSA-2004:342  View
57098 8921 CVE-2004-0493 URL:http://www.redhat.com/support/errata/RHSA-2004-342.html  View
57099 8921 CVE-2004-0493 TRUSTIX:2004-0039  View
57100 8921 CVE-2004-0493 URL:http://www.trustix.org/errata/2004/0039/  View
57101 8921 CVE-2004-0493 OVAL:oval:org.mitre.oval:def:10605  View
57102 8921 CVE-2004-0493 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10605  View
57103 8921 CVE-2004-0493 XF:apache-apgetmimeheaderscore-dos(16524)  View
57104 8921 CVE-2004-0493 URL:http://xforce.iss.net/xforce/xfdb/16524  View
57105 8921 CVE-2004-0493 BID:10619  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62961 JVNDB-2004-000303 GNOME VFS の extfs バックエンド・スクリプトにおける任意のコードを実行される脆弱性 Red Hat Enterprise Linux 、 MIRACLE LINUX の gnome-vfs パッケージに含まれる extfs バックエンド・スクリプトには、複数のセキュリティ上の不備のため、任意のコードを実行される脆弱性が存在します。 CVE-2004-0494 8921 7.5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000303.html  View