CVE-2004-0809
The mod_dav module in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (child process crash) via a certain sequence of LOCK requests for a location that allows WebDAV authoring access.
- EPSS
- 17% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- apache:http_server
- debian:debian_linux
- gentoo:linux
- hp:hp-ux
- hp:secure_web_server_for_tru64
- mandrakesoft:mandrake_linux
- redhat:enterprise_linux
- redhat:enterprise_linux_desktop
- trustix:secure_linux
- turbolinux:turbolinux_desktop
- turbolinux:turbolinux_home
- turbolinux:turbolinux_server
References
- http://cvs.apache.org/viewcvs.cgi/httpd-2.0/modules/dav/fs/lock.c?r1=1.32&r2=1.33
- http://www.debian.org/security/2004/dsa-558
- http://www.gentoo.org/security/en/glsa/glsa-200409-21.xml
- http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:096
- http://www.redhat.com/support/errata/RHSA-2004-463.html