CVE-2004-0942: Medium severity Apache HTTP Server vulnerability
Published Nov 4, 2004
·Updated
Apache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request with a MIME header containing multiple lines with a large number of space characters.
Affected Software
1 affected component
Apache HTTP Server<=2.0.52
Event History
Nov 4, 2004
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0942?
CVE-2004-0942 has a medium severity as it can cause denial of service due to high CPU consumption.
2
How do I fix CVE-2004-0942?
To fix CVE-2004-0942, upgrade your Apache HTTP Server to a version later than 2.0.52.
3
What types of attacks are associated with CVE-2004-0942?
CVE-2004-0942 is associated with denial of service attacks that exploit malformed HTTP GET requests.
4
Which versions of Apache are vulnerable to CVE-2004-0942?
Apache HTTP Server versions 2.0.52 and earlier are vulnerable to CVE-2004-0942.
5
Is CVE-2004-0942 still a relevant vulnerability today?
CVE-2004-0942 is less relevant today due to the outdated software versions involved but it highlights the risk of malformed requests.