CVE-2005-2728
- State
- Published
- Severity
- Not scored
- Published
- Aug 29, 2005
- Updated
- Aug 7, 2024
- Reserved
- Aug 29, 2005
Description
The byte-range filter in Apache 2.0 before 2.0.54 allows remote attackers to cause a denial of service (memory consumption) via an HTTP header with a large Range field.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 16705third-party-advisory
- 14660vdb-entry
- RHSA-2005:608vendor-advisory
- oval:org.mitre.oval:def:10017vdb-entrysignature
- 16743third-party-advisory
- 16753third-party-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm
- TSLSA-2005-0059vendor-advisory
- SUSE-SA:2005:051vendor-advisory
- 17831third-party-advisory
- USN-177-1vendor-advisory
- GLSA-200508-15vendor-advisory
- SSRT051251vendor-advisory
- apache-byterange-dos(22006)vdb-entry
- oval:org.mitre.oval:def:1246vdb-entrysignature
- 16754third-party-advisory
- 18333third-party-advisory
- MDKSA-2005:161vendor-advisory
- 604third-party-advisory
- 17923third-party-advisory
- http://issues.apache.org/bugzilla/show_bug.cgi?id=29962
- 16789third-party-advisory
- 16714third-party-advisory
- 16769third-party-advisory
- 17036third-party-advisory
- 17288third-party-advisory
- 16956third-party-advisory
- 19072third-party-advisory
- 18517third-party-advisory
- oval:org.mitre.oval:def:760vdb-entrysignature
- 16746third-party-advisory
- SUSE-SA:2005:052vendor-advisory
- DSA-805vendor-advisory
- 17600third-party-advisory
- 16559third-party-advisory
- 18161third-party-advisory
- oval:org.mitre.oval:def:1727vdb-entrysignature
- 102198vendor-advisory
- ADV-2006-0789vdb-entry
- [httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list
- [httpd-cvs] 20190815 svn commit: r1048743 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list
- [httpd-cvs] 20200401 svn commit: r1058586 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list
- [httpd-cvs] 20200401 svn commit: r1058587 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list
- [httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/mailing-list
- [httpd-cvs] 20210330 svn commit: r1888194 [4/13] - /httpd/site/trunk/content/security/json/mailing-list
- [httpd-cvs] 20210330 svn commit: r1073140 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list
- [httpd-cvs] 20210330 svn commit: r1073143 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/mailing-list
- [httpd-cvs] 20210330 svn commit: r1073139 [4/13] - in /websites/staging/httpd/trunk/content: ./ security/json/mailing-list
- [httpd-cvs] 20210330 svn commit: r1073149 [5/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/mailing-list
- [httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/mailing-list
- [httpd-cvs] 20210606 svn commit: r1075470 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.