CVE-2005-2728: apache http_server

CVSS: 5.0v2.0MediumModified

AliasesDEBIAN-CVE-2005-2728

Published 29-08-2005Last modified 07-08-2024

Some data may be incomplete

1 reference with an unsupported link type was hidden.

Vulnerability summary

CVE-2005-2728 is a medium (CVSS 5.0) vulnerability in apache http_server. EPSS estimates a 10.98% chance of exploitation in the next 30 days, higher than 95.8% of scored vulnerabilities.

Overall risk

22/100

0100

Low · default modelHow is this calculated?

CVSS score

5.0/10

010

Medium · v2.0 (NVD)

EPSS score

10.98%

0%100%

Medium · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 2

DSA-805-1 RHSA-2005:608

Timeline

29-08-2005
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

The byte-range filter in Apache 2.0 before 2.0.54 allows remote attackers to cause a denial of service (memory consumption) via an HTTP header with a large Range field.

CVSS metrics

1 score · 1 source · 1 version

v2.05.0

EPSS trend

Probability

10.98%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

0.00 pp

From 10.98% on 18-09-2026

18-09-202618-10-2026

EPSS score

10.98%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Apache1 product

http_serverEOL2.0 | 2.0.9 | 2.0.28 | 2.0.28:beta | 2.0.32 | 2.0.35 | 2.0.36 | 2.0.37 | 2.0.38 | 2.0.39 | 2.0.40 | 2.0.41 | 2.0.42 | 2.0.43 | 2.0.44 | 2.0.45 | 2.0.46 | 2.0.47 | 2.0.48 | 2.0.49 | 2.0.50 | 2.0.51 | 2.0.52 | 2.0.53

Debian1 product

apache2< 2.0.54-5

2 vendors · 2 products

References

52 links

secunia.com/advisories/16705Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/bid/14660VDB EntryX Refsource BIDPatch
www.redhat.com/support/errata/RHSA-2005-608.htmlVendor AdvisoryX Refsource REDHAT
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10017VDB EntrySignatureX Refsource OVAL
secunia.com/advisories/16743Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/16753Third Party AdvisoryX Refsource SECUNIA
support.avaya.com/elmodocs2/security/ASA-2006-081.htmX Refsource CONFIRM
lists.trustix.org/pipermail/tsl-announce/2005-October/000354.htmlVendor AdvisoryX Refsource TRUSTIX
www.novell.com/linux/security/advisories/2005_51_apache2.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/17831Third Party AdvisoryX Refsource SECUNIA

Show all 52 references

www.ubuntu.com/usn/usn-177-1Vendor AdvisoryX Refsource UBUNTU
www.gentoo.org/security/en/glsa/glsa-200508-15.xmlVendor AdvisoryX Refsource GENTOOPatch
www.securityfocus.com/archive/1/428138/100/0/threadedVendor AdvisoryX Refsource HP
exchange.xforce.ibmcloud.com/vulnerabilities/22006VDB EntryX Refsource XF
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1246VDB EntrySignatureX Refsource OVAL
secunia.com/advisories/16754Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/18333Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/security/advisories?name=MDKSA-2005:161Vendor AdvisoryX Refsource MANDRIVA
securityreason.com/securityalert/604Third Party AdvisoryX Refsource SREASON
secunia.com/advisories/17923Third Party AdvisoryX Refsource SECUNIA
issues.apache.org/bugzilla/show_bug.cgi?id=29962X Refsource CONFIRMPatchVendor Advisory
secunia.com/advisories/16789Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/16714Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/16769Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/17036Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/17288Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/16956Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/19072Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/18517Third Party AdvisoryX Refsource SECUNIA
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A760VDB EntrySignatureX Refsource OVAL
secunia.com/advisories/16746Third Party AdvisoryX Refsource SECUNIA
www.novell.com/linux/security/advisories/2005_52_apache2.htmlVendor AdvisoryX Refsource SUSE
www.debian.org/security/2005/dsa-805Vendor AdvisoryX Refsource DEBIAN
secunia.com/advisories/17600Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/16559/Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/18161Third Party AdvisoryX Refsource SECUNIA
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1727VDB EntrySignatureX Refsource OVAL
sunsolve.sun.com/search/document.do?assetkey=1-26-102198-1Vendor AdvisoryX Refsource SUNALERT
www.vupen.com/english/advisories/2006/0789VDB EntryX Refsource VUPEN
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
security-tracker.debian.org/tracker/CVE-2005-2728Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities