First published: Thu Nov 04 2004(Updated: )
Apache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request with a MIME header containing multiple lines with a large number of space characters.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Apache HTTP Server | <=2.0.52 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2004-0942 has a medium severity as it can cause denial of service due to high CPU consumption.
To fix CVE-2004-0942, upgrade your Apache HTTP Server to a version later than 2.0.52.
CVE-2004-0942 is associated with denial of service attacks that exploit malformed HTTP GET requests.
Apache HTTP Server versions 2.0.52 and earlier are vulnerable to CVE-2004-0942.
CVE-2004-0942 is less relevant today due to the outdated software versions involved but it highlights the risk of malformed requests.