CVE-2004-0751

The char_buffer_read function in the mod_ssl module for Apache 2.x, when using reverse proxying...

5.0 MediumPublic exploitFix available

CVE-2004-0751 is a medium vulnerability (CVSS 5.0) in Apache Http Server, published September 10, 2004. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 72.3%, the 99th percentile. Fixed in apache2 2.0.50-11.

What does this mean?

Severity: 5.0 MediumCVSS 2.0, NVD
Exploit chance: 72.3%EPSS, 99th percentile
Exploitation: None known1 public exploit
Fixed in: 2.0.50-11apache2 +18 more

Description

The char_buffer_read function in the mod_ssl module for Apache 2.x, when using reverse proxying to an SSL server, allows remote attackers to cause a denial of service (segmentation fault).

Exploit likelihood

72.3%Up 39.3 points since Feb 4, 2022

Affected products

apache http server

Affected packages

Affected packages
Package	Affected	Fixed
`apache2` Debian:12	before 2.0.50-11	2.0.50-11
`apache2` Debian:13	before 2.0.50-11	2.0.50-11
`apache2` Debian:14	before 2.0.50-11	2.0.50-11
`httpd` Red Hat:enterprise_linux:3::as From an advisory covering 4 CVEs	before 0:2.0.46-40.ent	0:2.0.46-40.ent
`httpd-debuginfo` Red Hat:enterprise_linux:3::as From an advisory covering 4 CVEs	before 0:2.0.46-40.ent	0:2.0.46-40.ent
`httpd-devel` Red Hat:enterprise_linux:3::as From an advisory covering 4 CVEs	before 0:2.0.46-40.ent	0:2.0.46-40.ent
`mod_ssl` Red Hat:enterprise_linux:3::as From an advisory covering 4 CVEs	before 1:2.0.46-40.ent	1:2.0.46-40.ent
`httpd` Red Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs	before 0:2.0.46-40.ent	0:2.0.46-40.ent
`httpd-debuginfo` Red Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs	before 0:2.0.46-40.ent	0:2.0.46-40.ent
`httpd-devel` Red Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs	before 0:2.0.46-40.ent	0:2.0.46-40.ent

Show 9 moreShow less

Affected packages
Package	Affected	Fixed
`mod_ssl` Red Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs	before 1:2.0.46-40.ent	1:2.0.46-40.ent
`httpd` Red Hat:enterprise_linux:3::es From an advisory covering 4 CVEs	before 0:2.0.46-40.ent	0:2.0.46-40.ent
`httpd-debuginfo` Red Hat:enterprise_linux:3::es From an advisory covering 4 CVEs	before 0:2.0.46-40.ent	0:2.0.46-40.ent
`httpd-devel` Red Hat:enterprise_linux:3::es From an advisory covering 4 CVEs	before 0:2.0.46-40.ent	0:2.0.46-40.ent
`mod_ssl` Red Hat:enterprise_linux:3::es From an advisory covering 4 CVEs	before 1:2.0.46-40.ent	1:2.0.46-40.ent
`httpd` Red Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs	before 0:2.0.46-40.ent	0:2.0.46-40.ent
`httpd-debuginfo` Red Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs	before 0:2.0.46-40.ent	0:2.0.46-40.ent
`httpd-devel` Red Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs	before 0:2.0.46-40.ent	0:2.0.46-40.ent
`mod_ssl` Red Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs	before 1:2.0.46-40.ent	1:2.0.46-40.ent

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Apache mod_ssl 2.0.x - Remote Denial of Service	2004-09-10

What each source reports

NVD Score used5.0

The char_buffer_read function in the mod_ssl module for Apache 2.x, when using reverse proxying to an SSL server, allows remote attackers to cause a denial of service (segmentation fault).

Record: CVE-2004-0751
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Updated: 2026-11-02

CVE ListNo score

The char_buffer_read function in the mod_ssl module for Apache 2.x, when using reverse proxying to an SSL server, allows remote attackers to cause a denial of service (segmentation fault).

Record: CVE-2004-0751
Updated: 2026-11-02

EUVDEUVD-2004-0749No score

The char_buffer_read function in the mod_ssl module for Apache 2.x, when using reverse proxying to an SSL server, allows remote attackers to cause a denial of service (segmentation fault).

Record: EUVD-2004-0749
Updated: 2026-11-03

GitHub AdvisoriesGHSA-jw83-f5rc-8wmvNo score

The char_buffer_read function in the mod_ssl module for Apache 2.x, when using reverse proxying...

The char_buffer_read function in the mod_ssl module for Apache 2.x, when using reverse proxying to an SSL server, allows remote attackers to cause a denial of service (segmentation fault).

Record: GHSA-jw83-f5rc-8wmv
Updated: 2026-11-02

OSVBELL-CVE-2004-07515.0

CVE-2004-0751 does not affect BellSoft software

Record: BELL-CVE-2004-0751
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Updated: 2026-11-02

OSVNo score

The char_buffer_read function in the mod_ssl module for Apache 2.x, when using reverse proxying to an SSL server, allows remote attackers to cause a denial of service (segmentation fault).

Record: CVE-2004-0751
Updated: 2026-11-02

OSVDEBIAN-CVE-2004-0751No score

The char_buffer_read function in the mod_ssl module for Apache 2.x, when using reverse proxying to an SSL server, allows remote attackers to cause a denial of service (segmentation fault).

Record: DEBIAN-CVE-2004-0751
Updated: 2026-11-02

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 56 moreShow less