NVD

Id
70577  
Name
CVE-2004-0113  
Description
Memory leak in ssl_engine_io.c for mod_ssl in Apache 2 before 2.0.49 allows remote attackers to cause a denial of service (memory consumption) via plain HTTP requests to the SSL port of an SSL-enabled server.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2016-12-20  
Published
2004-03-29  
Modified Date
2016-10-17  
Seq
2004-0113  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
363888 70577 CVE-2004-0113 CLSA-2004:839  View
363889 70577 CVE-2004-0113 http://issues.apache.org/bugzilla/show_bug.cgi?id=27106  View
363890 70577 CVE-2004-0113 [apache-cvs] 20040307 cvs commit: httpd-2.0/modules/ssl ssl_engine_io.c  View
363891 70577 CVE-2004-0113 20040325 LNSA-#2004-0006: bug workaround for Apache 2.0.48  View
363892 70577 CVE-2004-0113 APPLE-SA-2004-05-03  View
363893 70577 CVE-2004-0113 SSRT4717  View
363894 70577 CVE-2004-0113 oval:org.mitre.oval:def:876  View
363895 70577 CVE-2004-0113 GLSA-200403-04  View
363896 70577 CVE-2004-0113 http://www.apacheweek.com/features/security-20  View
363897 70577 CVE-2004-0113 MDKSA-2004:043  View
363898 70577 CVE-2004-0113 RHSA-2004:084  View
363899 70577 CVE-2004-0113 RHSA-2004:182  View
363900 70577 CVE-2004-0113 9826  View
363901 70577 CVE-2004-0113 2004-0017  View
363902 70577 CVE-2004-0113 apache-modssl-plain-dos(15419)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62729 JVNDB-2004-000070 Apache HTTP Server の mod_sslモジュールにおけるサービス運用妨害 (DoS) の脆弱性 Apache HTTP Server に含まれている mod_ssl には SSL による通信を有効にしているポートで通常の SSL 通信を介さない HTTP リクエストを受信した場合、メモリリークが発生する脆弱性が存在します。 CVE-2004-0113 8540 CVE-2004-0113 70577 5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000070.html 2004-03-07 2007-04-01 View