CVE-2004-0113

CVE-2004-0113, security advisory, suse linux, suse, security, cve

CVE-2004-0113

Common Vulnerabilities and Exposures

[Previous] [Index] [Next]

Upstream information

CVE-2004-0113 at MITRE

Description

Memory leak in ssl_engine_io.c for mod_ssl in Apache 2 before 2.0.49 allows remote attackers to cause a denial of service (memory consumption) via plain HTTP requests to the SSL port of an SSL-enabled server.

---

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having moderate severity.

CVSS v2 Scores

	National Vulnerability Database
Base Score	5
Vector	AV:N/AC:L/Au:N/C:N/I:N/A:P
Access Vector	Network
Access Complexity	Low
Authentication	None
Confidentiality Impact	None
Integrity Impact	None
Availability Impact	Partial

SUSE Bugzilla entries: 50450 [RESOLVED / DUPLICATE], 875455 [RESOLVED / FIXED]

SUSE Security Advisories:

• SuSE-SA:2004:008, published Wed Apr 14 16:00:00 MEST 2004
• SuSE-SA:2004:009, published Wednesday, Apr. 14th 2004 17:30 MEST
• SuSE-SA:2004:012, published Friday, May 14th 2004 16:00 MEST

---

SUSE Timeline for this CVE

CVE page created: Fri Jun 28 00:44:02 2013
CVE page last modified: Fri Dec 8 16:09:19 2023