NetSight
IP …
medium6.4Public exploit code

CVE-2004-0493

The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error leading to a heap-based buffer overflow on 64 bit systems, via long header lines with large numbers of space or tab characters.

Affected products

VendorProductAffected versions
AvayaConverged Communications Server
Version 2.0
GentooLinux
Version 1.4
TrustixSecure Linux
Versions 1.5, 2.0, 2.1
ApacheHttp Server
Versions 2.0.47, 2.0.48, 2.0.49
IbmHttp Server
Versions 2.0.42, 2.0.42.1, 2.0.42.2, 2.0.47, 2.0.47.1
AvayaS8300
Version r2.0.0
AvayaS8500
Version r2.0.0
AvayaS8700
Version r2.0.0

References