CVE-2004-0493 — MEDIUM severity vulnerability (The ap_get_mime_headers_core function in Apache httpd 2.0.49)
The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error leading to a heap-based buffer overflow on 64 bit systems, via long header lines with large numbers of space or tab characters.
| CVE ID | CVE-2004-0493 |
|---|---|
| Severity | MEDIUM |
| CVSS score | 6.4 |
| CVSS vector | AV:N/AC:L/Au:N/C:N/I:P/A:P |
| CWE | NVD-CWE-Other |
| Status | Modified |
| Published | 2004-08-06 |
| Last modified | 2026-04-16 |
| Description | The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error leading to a heap-based buffer overflow on 64 bit systems, via long header lines with large numbers of space or tab characters. |
| Source | NIST National Vulnerability Database |
🔍 Search all vulnerabilities →
$999/mo
Try CVECheck →