CVE-2004-1834: apache http_server
Vulnerability summary
CVE-2004-1834 is a low (CVSS 2.1) vulnerability in apache http_server. EPSS estimates a 3.50% chance of exploitation in the next 30 days, higher than 89.1% of scored vulnerabilities. 3 public exploits are recorded.
Not severe (CVSS 2.1, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 1Timeline
- 10-05-2005PublishedVulnerability first disclosed.
- 08-08-2024Last modifiedVulnerability information updated.
Description
mod_disk_cache in Apache 2.0 through 2.0.49 stores client headers, including authentication information, on the hard disk, which could allow local users to gain sensitive information.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
3.50%
Chance of exploitation in the next 30 days
Percentile
89%
Versus all other CVEs
30-day change
No change 0.00 pp
From 3.50% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
3 foundExploit Reference (securitytracker.com)
Maturity: unknown
Exploit Reference (osvdb.org)
Maturity: unknown
Exploit Reference (secunia.com)
Maturity: unknown
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Known conditions: local access, no authentication (CVSS vector). Other conditions: not stated in public data.
Apache1 product
- http_serverEOL2.0 | 2.0.9 | 2.0.28 | 2.0.28:beta | 2.0.32 | 2.0.35 | 2.0.36 | 2.0.37 | 2.0.38 | 2.0.39 | 2.0.40 | 2.0.41 | 2.0.42 | 2.0.43 | 2.0.44 | 2.0.45 | 2.0.46 | 2.0.47 | 2.0.48 | 2.0.49
Debian1 product
- apache2< 2.0.53-1
2 vendors · 2 products
References
26 links- support.avaya.com/elmodocs2/security/ASA-2006-081.htmX Refsource CONFIRM
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11133VDB EntrySignatureX Refsource OVAL
