CVE-2004-0748
mod_ssl in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (CPU...
mod_ssl in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (CPU consumption) by aborting an SSL connection in a way that causes an Apache child process to enter an infinite loop.
Exploit likelihood
What each source reports
NVD Score used
mod_ssl in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (CPU consumption) by aborting an SSL connection in a way that causes an Apache child process to enter an infinite loop.
- Record
CVE-2004-0748- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-835
- Updated
- 2026-11-02
CVE List No score
mod_ssl in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (CPU consumption) by aborting an SSL connection in a way that causes an Apache child process to enter an infinite loop.
- Record
CVE-2004-0748- Updated
- 2026-11-02
EUVDEUVD-2004-0746 No score
mod_ssl in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (CPU consumption) by aborting an SSL connection in a way that causes an Apache child process to enter an infinite loop.
- Record
EUVD-2004-0746- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4v97-3733-h7mw No score
mod_ssl in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (CPU...
mod_ssl in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (CPU consumption) by aborting an SSL connection in a way that causes an Apache child process to enter an infinite loop.
- Record
GHSA-4v97-3733-h7mw- Weakness
- CWE-835
- Updated
- 2026-11-02
OSVBELL-CVE-2004-0748
CVE-2004-0748 does not affect BellSoft software
- Record
BELL-CVE-2004-0748- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
OSV No score
mod_ssl in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (CPU consumption) by aborting an SSL connection in a way that causes an Apache child process to enter an infinite loop.
- Record
CVE-2004-0748- Updated
- 2026-11-02
OSVDEBIAN-CVE-2004-0748 No score
mod_ssl in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (CPU consumption) by aborting an SSL connection in a way that causes an Apache child process to enter an infinite loop.
- Record
DEBIAN-CVE-2004-0748- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
apache2Debian:12 |
before 2.0.51 | 2.0.51 |
apache2Debian:13 |
before 2.0.51 | 2.0.51 |
apache2Debian:14 |
before 2.0.51 | 2.0.51 |
httpdRed Hat:enterprise_linux:3::as |
before 0:2.0.46-38.ent | 0:2.0.46-38.ent |
httpd-debuginfoRed Hat:enterprise_linux:3::as |
before 0:2.0.46-38.ent | 0:2.0.46-38.ent |
httpd-develRed Hat:enterprise_linux:3::as |
before 0:2.0.46-38.ent | 0:2.0.46-38.ent |
mod_sslRed Hat:enterprise_linux:3::as |
before 1:2.0.46-38.ent | 1:2.0.46-38.ent |
httpdRed Hat:enterprise_linux:3::desktop |
before 0:2.0.46-38.ent | 0:2.0.46-38.ent |
httpd-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:2.0.46-38.ent | 0:2.0.46-38.ent |
httpd-develRed Hat:enterprise_linux:3::desktop |
before 0:2.0.46-38.ent | 0:2.0.46-38.ent |
Show 9 moreShow less
| Package | Affected | Fixed |
|---|---|---|
mod_sslRed Hat:enterprise_linux:3::desktop |
before 1:2.0.46-38.ent | 1:2.0.46-38.ent |
httpdRed Hat:enterprise_linux:3::es |
before 0:2.0.46-38.ent | 0:2.0.46-38.ent |
httpd-debuginfoRed Hat:enterprise_linux:3::es |
before 0:2.0.46-38.ent | 0:2.0.46-38.ent |
httpd-develRed Hat:enterprise_linux:3::es |
before 0:2.0.46-38.ent | 0:2.0.46-38.ent |
mod_sslRed Hat:enterprise_linux:3::es |
before 1:2.0.46-38.ent | 1:2.0.46-38.ent |
httpdRed Hat:enterprise_linux:3::ws |
before 0:2.0.46-38.ent | 0:2.0.46-38.ent |
httpd-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:2.0.46-38.ent | 0:2.0.46-38.ent |
httpd-develRed Hat:enterprise_linux:3::ws |
before 0:2.0.46-38.ent | 0:2.0.46-38.ent |
mod_sslRed Hat:enterprise_linux:3::ws |
before 1:2.0.46-38.ent | 1:2.0.46-38.ent |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-0748 is a medium vulnerability (CVSS 5.0) in Apache Http Server, published September 10, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 24.7%, the 97th percentile. Fixed in apache2 2.0.51.
References
novell.com/linux/security/advisories/2004_30_apache2.html
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=130750
trustix.org/errata/2004/0047
mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:096
gentoo.org/security/en/glsa/glsa-200409-21.xml
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11126
Show 42 moreShow less
redhat.com/support/errata/RHSA-2004-349.html
exchange.xforce.ibmcloud.com/vulnerabilities/17200
lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E
nvd.nist.gov/vuln/detail/CVE-2004-0748
github.com/advisories/GHSA-4v97-3733-h7mw
docs.bell-sw.com/security/cves/CVE-2004-0748
security-tracker.debian.org/tracker/CVE-2004-0748
access.redhat.com/errata/RHSA-2004:349
nagoya.apache.org/bugzilla/show_bug.cgi?id=29964
security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_349.json
cve.org/CVERecord?id=CVE-2004-0748