CVE-2005-2728: Medium severity Apache HTTP Server vulnerability
Published Aug 29, 2005
·Updated
The byte-range filter in Apache 2.0 before 2.0.54 allows remote attackers to cause a denial of service (memory consumption) via an HTTP header with a large Range field.
Affected Software
24 affected components
Apache HTTP Server=2.0
Apache HTTP Server=2.0.9
Apache HTTP Server=2.0.28
Apache HTTP Server=2.0.28-beta
Apache HTTP Server=2.0.32
Apache HTTP Server=2.0.35
Apache HTTP Server=2.0.36
Apache HTTP Server=2.0.37
Apache HTTP Server=2.0.38
Apache HTTP Server=2.0.39
Apache HTTP Server=2.0.40
Apache HTTP Server=2.0.41
Apache HTTP Server=2.0.42
Apache HTTP Server=2.0.43
Apache HTTP Server=2.0.44
Apache HTTP Server=2.0.45
Apache HTTP Server=2.0.46
Apache HTTP Server=2.0.47
Apache HTTP Server=2.0.48
Apache HTTP Server=2.0.49
Apache HTTP Server=2.0.50
Apache HTTP Server=2.0.51
Apache HTTP Server=2.0.52
Apache HTTP Server=2.0.53
Remediation
Patch Available
Patch Available
Patch Available
Event History
Aug 29, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-2728?
CVE-2005-2728 has a medium severity rating due to its potential to cause denial of service through memory consumption.
2
How do I fix CVE-2005-2728?
To fix CVE-2005-2728, upgrade to Apache HTTP Server version 2.0.54 or later.
3
What versions of Apache HTTP Server are affected by CVE-2005-2728?
CVE-2005-2728 affects Apache HTTP Server versions 2.0.28 through 2.0.53.
4
What kind of attack does CVE-2005-2728 facilitate?
CVE-2005-2728 facilitates denial of service attacks via a large Range HTTP header.
5
Who is at risk due to CVE-2005-2728?
Remote attackers can exploit CVE-2005-2728 to target servers running affected versions of Apache HTTP Server.