Search for vulnerabilities
Vulnerability details: VCID-b37n-nzkt-z3ad
Vulnerability ID VCID-b37n-nzkt-z3ad
Aliases CVE-2004-0786
Summary Testing using the Codenomicon HTTP Test Tool performed by the Apache Software Foundation security group and Red Hat uncovered an input validation issue in the IPv6 URI parsing routines in the apr-util library. If a remote attacker sent a request including a carefully crafted URI, an httpd child process could be made to crash. One some BSD systems it is believed this flaw may be able to lead to remote code execution.
Status Published
Exploitability 0.5
Weighted Severity 7.0
Risk 3.5
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.93658
EPSS Score 0.12403
Published At Aug. 1, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:28:42.275652+00:00 Apache HTTPD Importer Import https://httpd.apache.org/security/json/CVE-2004-0786.json 37.0.0