CVE-2004-0747: Apache HTTP Server

High severity, CVSS 7.8. EPSS: 1.6% chance of exploitation in the next 30 days.

Buffer overflow in Apache 2.0.50 and earlier allows local users to gain apache privileges via a .htaccess file that causes the overflow during expansion of environment variables.

Affected products

• Apache HTTP Server: from 2.0.35, before 2.0.51 (fixed in 2.0.51)

Published 2004-10-20. Last modified 2026-06-16.