CVE-2004-0113 Common Vulnerabilities and Exposures

Upstream information

CVE-2004-0113 at MITRE

Description

Memory leak in ssl_engine_io.c for mod_ssl in Apache 2 before 2.0.49 allows remote attackers to cause a denial of service (memory consumption) via plain HTTP requests to the SSL port of an SSL-enabled server.

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having moderate severity.

CVSS v2 Scores
CVSS detail	National Vulnerability Database
Base Score	5
Vector	AV:N/AC:L/Au:N/C:N/I:N/A:P
Access Vector	Network
Access Complexity	Low
Authentication	None
Confidentiality Impact	None
Integrity Impact	None
Availability Impact	Partial

SUSE Bugzilla entries: 50450 [RESOLVED / DUPLICATE], 875455 [RESOLVED / FIXED]

SUSE Security Advisories:

SuSE-SA:2004:008, published Wed Apr 14 16:00:00 MEST 2004
SuSE-SA:2004:009, published Wednesday, Apr. 14th 2004 17:30 MEST
SuSE-SA:2004:012, published Friday, May 14th 2004 16:00 MEST

SUSE Timeline for this CVE

CVE page created: Fri Jun 28 00:44:02 2013
CVE page last modified: Mon Oct 6 18:14:34 2025