What’s Vulnerable › Vulnerabilities

CVE-2005-2728

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 11.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2005-08-30 · updated 2026-06-16

Description

The byte-range filter in Apache 2.0 before 2.0.54 allows remote attackers to cause a denial of service (memory consumption) via an HTTP header with a large Range field.

Affected products

• Apache HTTP Server: 2.0, 2.0.9, 2.0.28, 2.0.28-beta, 2.0.32, 2.0.35 (+18)

References

• http://issues.apache.org/bugzilla/show_bug.cgi?id=29962
• http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html
• http://secunia.com/advisories/16559/
• http://secunia.com/advisories/16705
• http://secunia.com/advisories/16714
• http://secunia.com/advisories/16743
• http://secunia.com/advisories/16746
• http://secunia.com/advisories/16753
• http://secunia.com/advisories/16754
• http://secunia.com/advisories/16769
• http://secunia.com/advisories/16789

Get alerted when CVE-2005-2728 or the next vulnerability affects your stack