CVE-2004-0942: Apache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request with a MIME header…

PriorityP429medium5CVSS 2.0

AVNACLAuNCNINAP

EXPLOIT

EPSS

55.11%

98.9th percentile

Apache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request with a MIME header containing multiple lines with a large number of space characters.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
apache	http_server	<= 2.0.52	—
debian	apache2	< apache2 2.0.52-2 (bookworm)	apache2 2.0.52-2 (bookworm)

Detection & IOCsextracted from sources · hover to see the quote

→Detect HTTP GET requests where MIME/header lines consist of an abnormally large number of repeated space characters (e.g. 8000+ spaces per line), repeated across many lines — characteristic of CVE-2004-0942 DoS exploitation. ↗
→Alert on HTTP server instances exhibiting disproportionate memory or CPU consumption correlated with large inbound request sizes from a single remote source — indicative of the field-length-limit bypass described in this CVE. ↗

·This vulnerability affects Apache httpd 2.0.52 and earlier only; versions patched at 2.0.52-2 (Debian/Ubuntu) are not affected. Ensure version checks in detection rules are scoped accordingly. ↗

CVSS provenance

nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P

osv5.0MEDIUM

vendor_debian5.0MEDIUM

vendor_redhat5.0MEDIUM

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.