CVE-2004-0748: Apache HTTP Server

Medium severity, CVSS 5.0. EPSS: 24.7% chance of exploitation in the next 30 days.

mod_ssl in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (CPU consumption) by aborting an SSL connection in a way that causes an Apache child process to enter an infinite loop.

Affected products

• Apache HTTP Server: from 2.0.35, before 2.0.51 (fixed in 2.0.51)

Published 2004-10-20. Last modified 2026-06-16.