CVE-2004-2381
published 2004-12-31CVE-2004-2381: HttpRequest.java in Jetty HTTP Server before 4.2.19 allows remote attackers to cause denial of service (memory usage and application crash) via HTTP requests…
PriorityP416medium5CVSS 2.0
AVNACLAuNCNINAP
EPSS
1.80%
75.8th percentile
HttpRequest.java in Jetty HTTP Server before 4.2.19 allows remote attackers to cause denial of service (memory usage and application crash) via HTTP requests with a large Content-Length.
Affected
67 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| jetty | jetty_http_server | — | — |
| jetty | jetty_http_server | — | — |
| jetty | jetty_http_server | — | — |
| jetty | jetty_http_server | — | — |
| jetty | jetty_http_server | — | — |
| jetty | jetty_http_server | — | — |
| jetty | jetty_http_server | — | — |
| jetty | jetty_http_server | — | — |
| jetty | jetty_http_server | — | — |
| jetty | jetty_http_server | — | — |
| jetty | jetty_http_server | — | — |
| jetty | jetty_http_server | — | — |
| jetty | jetty_http_server | — | — |
| jetty | jetty_http_server | — | — |
| jetty | jetty_http_server | — | — |
| jetty | jetty_http_server | — | — |
| jetty | jetty_http_server | — | — |
| jetty | jetty_http_server | — | — |
| jetty | jetty_http_server | — | — |
| jetty | jetty_http_server | — | — |
| jetty | jetty_http_server | — | — |
| jetty | jetty_http_server | — | — |
| jetty | jetty_http_server | — | — |
| jetty | jetty_http_server | — | — |
| jetty | jetty_http_server | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
Jetty HTTP Server Denial of Service vulnerability
osv·2022-04-29
CVE-2004-2381 [MEDIUM] Jetty HTTP Server Denial of Service vulnerability
Jetty HTTP Server Denial of Service vulnerability
HttpRequest.java in Jetty HTTP Server before 4.2.19 allows remote attackers to cause denial of service (memory usage and application crash) via HTTP requests with a large Content-Length.
GHSA
Jetty HTTP Server Denial of Service vulnerability
ghsa·2022-04-29
CVE-2004-2381 [MEDIUM] CWE-400 Jetty HTTP Server Denial of Service vulnerability
Jetty HTTP Server Denial of Service vulnerability
HttpRequest.java in Jetty HTTP Server before 4.2.19 allows remote attackers to cause denial of service (memory usage and application crash) via HTTP requests with a large Content-Length.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://cvs.sourceforge.net/viewcvs.py/jetty/Jetty/src/org/mortbay/http/HttpRequest.java?r1=1.75&r2=1.76http://secunia.com/advisories/11166/http://sourceforge.net/project/shownotes.php?release_id=224743http://www.osvdb.org/4387http://www.securityfocus.com/bid/9917https://exchange.xforce.ibmcloud.com/vulnerabilities/15537http://cvs.sourceforge.net/viewcvs.py/jetty/Jetty/src/org/mortbay/http/HttpRequest.java?r1=1.75&r2=1.76http://secunia.com/advisories/11166/http://sourceforge.net/project/shownotes.php?release_id=224743http://www.osvdb.org/4387http://www.securityfocus.com/bid/9917https://exchange.xforce.ibmcloud.com/vulnerabilities/15537
2004-12-31
Published