CVE-2004-0786: Apache HTTP Server

Medium severity, CVSS 5.0. EPSS: 24.1% chance of exploitation in the next 30 days.

The IPv6 URI parsing routines in the apr-util library for Apache 2.0.50 and earlier allow remote attackers to cause a denial of service (child process crash) via a certain URI, as demonstrated using the Codenomicon HTTP Test Tool.

Affected products

• Apache HTTP Server: from 2.0.35, before 2.0.51 (fixed in 2.0.51)

Published 2004-10-20. Last modified 2026-06-16.