CVE-2004-0751

The char_buffer_read function in the mod_ssl module for Apache 2.x, when using reverse proxying...

5.0 MediumPublic exploitFix available

The char_buffer_read function in the mod_ssl module for Apache 2.x, when using reverse proxying to an SSL server, allows remote attackers to cause a denial of service (segmentation fault).

Exploit likelihood

72.3%Up 39.3 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

The char_buffer_read function in the mod_ssl module for Apache 2.x, when using reverse proxying to an SSL server, allows remote attackers to cause a denial of service (segmentation fault).

Record: CVE-2004-0751
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Updated: 2026-11-02

CVE List No score

The char_buffer_read function in the mod_ssl module for Apache 2.x, when using reverse proxying to an SSL server, allows remote attackers to cause a denial of service (segmentation fault).

Record: CVE-2004-0751
Updated: 2026-11-02

EUVDEUVD-2004-0749 No score

The char_buffer_read function in the mod_ssl module for Apache 2.x, when using reverse proxying to an SSL server, allows remote attackers to cause a denial of service (segmentation fault).

Record: EUVD-2004-0749
Updated: 2026-11-03

GitHub AdvisoriesGHSA-jw83-f5rc-8wmv No score

The char_buffer_read function in the mod_ssl module for Apache 2.x, when using reverse proxying...

The char_buffer_read function in the mod_ssl module for Apache 2.x, when using reverse proxying to an SSL server, allows remote attackers to cause a denial of service (segmentation fault).

Record: GHSA-jw83-f5rc-8wmv
Updated: 2026-11-02

OSVBELL-CVE-2004-0751 5.0

CVE-2004-0751 does not affect BellSoft software

Record: BELL-CVE-2004-0751
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Updated: 2026-11-02

OSV No score

The char_buffer_read function in the mod_ssl module for Apache 2.x, when using reverse proxying to an SSL server, allows remote attackers to cause a denial of service (segmentation fault).

Record: CVE-2004-0751
Updated: 2026-11-02

OSVDEBIAN-CVE-2004-0751 No score

The char_buffer_read function in the mod_ssl module for Apache 2.x, when using reverse proxying to an SSL server, allows remote attackers to cause a denial of service (segmentation fault).

Record: DEBIAN-CVE-2004-0751
Updated: 2026-11-02

Affected products

apache http server

Affected packages

Affected packages
Package	Affected	Fixed
`apache2` Debian:12	before 2.0.50-11	2.0.50-11
`apache2` Debian:13	before 2.0.50-11	2.0.50-11
`apache2` Debian:14	before 2.0.50-11	2.0.50-11
`httpd` Red Hat:enterprise_linux:3::as	before 0:2.0.46-40.ent	0:2.0.46-40.ent
`httpd-debuginfo` Red Hat:enterprise_linux:3::as	before 0:2.0.46-40.ent	0:2.0.46-40.ent
`httpd-devel` Red Hat:enterprise_linux:3::as	before 0:2.0.46-40.ent	0:2.0.46-40.ent
`mod_ssl` Red Hat:enterprise_linux:3::as	before 1:2.0.46-40.ent	1:2.0.46-40.ent
`httpd` Red Hat:enterprise_linux:3::desktop	before 0:2.0.46-40.ent	0:2.0.46-40.ent
`httpd-debuginfo` Red Hat:enterprise_linux:3::desktop	before 0:2.0.46-40.ent	0:2.0.46-40.ent
`httpd-devel` Red Hat:enterprise_linux:3::desktop	before 0:2.0.46-40.ent	0:2.0.46-40.ent

Show 9 moreShow less

Affected packages
Package	Affected	Fixed
`mod_ssl` Red Hat:enterprise_linux:3::desktop	before 1:2.0.46-40.ent	1:2.0.46-40.ent
`httpd` Red Hat:enterprise_linux:3::es	before 0:2.0.46-40.ent	0:2.0.46-40.ent
`httpd-debuginfo` Red Hat:enterprise_linux:3::es	before 0:2.0.46-40.ent	0:2.0.46-40.ent
`httpd-devel` Red Hat:enterprise_linux:3::es	before 0:2.0.46-40.ent	0:2.0.46-40.ent
`mod_ssl` Red Hat:enterprise_linux:3::es	before 1:2.0.46-40.ent	1:2.0.46-40.ent
`httpd` Red Hat:enterprise_linux:3::ws	before 0:2.0.46-40.ent	0:2.0.46-40.ent
`httpd-debuginfo` Red Hat:enterprise_linux:3::ws	before 0:2.0.46-40.ent	0:2.0.46-40.ent
`httpd-devel` Red Hat:enterprise_linux:3::ws	before 0:2.0.46-40.ent	0:2.0.46-40.ent
`mod_ssl` Red Hat:enterprise_linux:3::ws	before 1:2.0.46-40.ent	1:2.0.46-40.ent

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Apache mod_ssl 2.0.x - Remote Denial of Service	2004-09-10

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2004-0751 is a medium vulnerability (CVSS 5.0) in Apache Http Server, published September 10, 2004. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 72.3%, the 99th percentile. Fixed in apache2 2.0.50-11.

References

Show 56 moreShow less