CVE-2004-0748: Medium severity Apache HTTP Server vulnerability
Published Sep 10, 2004
·Updated
modssl in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (CPU consumption) by aborting an SSL connection in a way that causes an Apache child process to enter an infinite loop.
Affected Software
1 affected component
Apache HTTP Server>=2.0.35<2.0.51
Event History
Sep 10, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0748?
CVE-2004-0748 is classified as a high severity vulnerability due to its potential to cause denial of service.
2
How do I fix CVE-2004-0748?
To mitigate CVE-2004-0748, upgrade Apache HTTP Server to version 2.0.51 or later.
3
What type of attack does CVE-2004-0748 involve?
CVE-2004-0748 involves a denial of service attack that exploits the SSL connection handling in Apache.
4
Which versions of Apache are affected by CVE-2004-0748?
CVE-2004-0748 affects Apache HTTP Server version 2.0.50 and earlier.
5
How can I confirm if my server is vulnerable to CVE-2004-0748?
To confirm vulnerability to CVE-2004-0748, check if you are running Apache version 2.0.50 or earlier.