PT-2004-1304 · Apache · Apache+1

Publicado

2004-02-20

·

Atualizado

2021-06-06

·

CVE-2004-0113

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Apache 2 versions prior to 2.0.49
Description A memory leak in the ssl engine io.c for mod ssl allows remote attackers to cause a denial of service via plain HTTP requests to the SSL port of an SSL-enabled server. This issue enables a remote denial of service attack against an SSL-enabled server by sending plain HTTP requests to the SSL port.
Recommendations For Apache 2 versions prior to 2.0.49, update to version 2.0.49 or later to resolve the issue. As a temporary workaround, consider restricting access to the SSL port to minimize the risk of exploitation.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2004-0113
RHSA-2004:084

Produtos afetados

Apache
Apache Http Server