Every CVE Search/ Get API key

CVE-2004-0942

Apache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service (CPU...

5.0 MediumPublic exploitFix available

Apache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request with a MIME header containing multiple lines with a large number of space characters.

Exploit likelihood

58.7%Up 25.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

Apache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request with a MIME header containing multiple lines with a large number of space characters.

Record
CVE-2004-0942
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Updated
2026-11-02
CVE List No score

Apache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request with a MIME header containing multiple lines with a large number of space characters.

Record
CVE-2004-0942
Updated
2026-11-02
EUVDEUVD-2004-0940 No score

Apache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request with a MIME header containing multiple lines with a large number of space characters.

Record
EUVD-2004-0940
Updated
2026-11-03
GitHub AdvisoriesGHSA-4vvg-48v9-mm83 No score

Apache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service (CPU...

Apache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request with a MIME header containing multiple lines with a large number of space characters.

Record
GHSA-4vvg-48v9-mm83
Updated
2026-11-02
OSVBELL-CVE-2004-0942 5.0

CVE-2004-0942 does not affect BellSoft software

Record
BELL-CVE-2004-0942
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Updated
2026-11-02
OSV No score

Apache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request with a MIME header containing multiple lines with a large number of space characters.

Record
CVE-2004-0942
Updated
2026-11-02
OSVDEBIAN-CVE-2004-0942 No score

Apache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request with a MIME header containing multiple lines with a large number of space characters.

Record
DEBIAN-CVE-2004-0942
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
apache2
Debian:12
 before 2.0.52-2
2.0.52-2
apache2
Debian:13
 before 2.0.52-2
2.0.52-2
apache2
Debian:14
 before 2.0.52-2
2.0.52-2
httpd
Red Hat:enterprise_linux:3::as
From an advisory covering 3 CVEs
 before 0:2.0.46-44.ent
0:2.0.46-44.ent
httpd-debuginfo
Red Hat:enterprise_linux:3::as
From an advisory covering 3 CVEs
 before 0:2.0.46-44.ent
0:2.0.46-44.ent
httpd-devel
Red Hat:enterprise_linux:3::as
From an advisory covering 3 CVEs
 before 0:2.0.46-44.ent
0:2.0.46-44.ent
mod_ssl
Red Hat:enterprise_linux:3::as
From an advisory covering 3 CVEs
 before 1:2.0.46-44.ent
1:2.0.46-44.ent
httpd
Red Hat:enterprise_linux:3::desktop
From an advisory covering 3 CVEs
 before 0:2.0.46-44.ent
0:2.0.46-44.ent
httpd-debuginfo
Red Hat:enterprise_linux:3::desktop
From an advisory covering 3 CVEs
 before 0:2.0.46-44.ent
0:2.0.46-44.ent
httpd-devel
Red Hat:enterprise_linux:3::desktop
From an advisory covering 3 CVEs
 before 0:2.0.46-44.ent
0:2.0.46-44.ent
Show 9 moreShow less
Affected packages
PackageAffectedFixed
mod_ssl
Red Hat:enterprise_linux:3::desktop
From an advisory covering 3 CVEs
 before 1:2.0.46-44.ent
1:2.0.46-44.ent
httpd
Red Hat:enterprise_linux:3::es
From an advisory covering 3 CVEs
 before 0:2.0.46-44.ent
0:2.0.46-44.ent
httpd-debuginfo
Red Hat:enterprise_linux:3::es
From an advisory covering 3 CVEs
 before 0:2.0.46-44.ent
0:2.0.46-44.ent
httpd-devel
Red Hat:enterprise_linux:3::es
From an advisory covering 3 CVEs
 before 0:2.0.46-44.ent
0:2.0.46-44.ent
mod_ssl
Red Hat:enterprise_linux:3::es
From an advisory covering 3 CVEs
 before 1:2.0.46-44.ent
1:2.0.46-44.ent
httpd
Red Hat:enterprise_linux:3::ws
From an advisory covering 3 CVEs
 before 0:2.0.46-44.ent
0:2.0.46-44.ent
httpd-debuginfo
Red Hat:enterprise_linux:3::ws
From an advisory covering 3 CVEs
 before 0:2.0.46-44.ent
0:2.0.46-44.ent
httpd-devel
Red Hat:enterprise_linux:3::ws
From an advisory covering 3 CVEs
 before 0:2.0.46-44.ent
0:2.0.46-44.ent
mod_ssl
Red Hat:enterprise_linux:3::ws
From an advisory covering 3 CVEs
 before 1:2.0.46-44.ent
1:2.0.46-44.ent

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBApache 2.0.52 - GET Denial of Service2005-03-04

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2004-0942 is a medium vulnerability (CVSS 5.0) in Apache Http Server, published November 4, 2004. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 58.7%, the 99th percentile. Fixed in apache2 2.0.52-2.

References

Show 53 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open