CVE-2004-0786: Medium severity Apache HTTP Server vulnerability
Published Sep 17, 2004
·Updated
The IPv6 URI parsing routines in the apr-util library for Apache 2.0.50 and earlier allow remote attackers to cause a denial of service (child process crash) via a certain URI, as demonstrated using the Codenomicon HTTP Test Tool.
Affected Software
1 affected component
Apache HTTP Server>=2.0.35<2.0.51
Remediation
Patch Available
Event History
Sep 17, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0786?
CVE-2004-0786 has a severity rating that indicates it can lead to denial of service through process crashes.
2
How do I fix CVE-2004-0786?
To mitigate CVE-2004-0786, upgrade to Apache HTTP Server version 2.0.51 or later.
3
What versions of Apache are affected by CVE-2004-0786?
CVE-2004-0786 affects Apache HTTP Server versions 2.0.35 to 2.0.50 inclusive.
4
What are the risks of not addressing CVE-2004-0786?
Not addressing CVE-2004-0786 may result in service interruptions due to crashes caused by malformed IPv6 URIs.
5
Who can exploit CVE-2004-0786?
CVE-2004-0786 can be exploited by remote attackers using specially crafted URIs to crash the server.