Search for vulnerabilities
Vulnerability details: VCID-vyvv-3yja-t7cu
Vulnerability ID VCID-vyvv-3yja-t7cu
Aliases CVE-2004-0488
Summary A buffer overflow in the mod_ssl FakeBasicAuth code could be exploited by an attacker using a (trusted) client certificate with a subject DN field which exceeds 6K in length.
Status Published
Exploitability 0.5
Weighted Severity 2.1
Risk 1.1
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.26607 https://api.first.org/data/v1/epss?cve=CVE-2004-0488
epss 0.26607 https://api.first.org/data/v1/epss?cve=CVE-2004-0488
epss 0.26607 https://api.first.org/data/v1/epss?cve=CVE-2004-0488
epss 0.58157 https://api.first.org/data/v1/epss?cve=CVE-2004-0488
epss 0.58157 https://api.first.org/data/v1/epss?cve=CVE-2004-0488
epss 0.58157 https://api.first.org/data/v1/epss?cve=CVE-2004-0488
epss 0.58157 https://api.first.org/data/v1/epss?cve=CVE-2004-0488
epss 0.58157 https://api.first.org/data/v1/epss?cve=CVE-2004-0488
epss 0.58157 https://api.first.org/data/v1/epss?cve=CVE-2004-0488
epss 0.58157 https://api.first.org/data/v1/epss?cve=CVE-2004-0488
epss 0.58157 https://api.first.org/data/v1/epss?cve=CVE-2004-0488
epss 0.58157 https://api.first.org/data/v1/epss?cve=CVE-2004-0488
epss 0.58157 https://api.first.org/data/v1/epss?cve=CVE-2004-0488
epss 0.58157 https://api.first.org/data/v1/epss?cve=CVE-2004-0488
epss 0.58157 https://api.first.org/data/v1/epss?cve=CVE-2004-0488
epss 0.58157 https://api.first.org/data/v1/epss?cve=CVE-2004-0488
epss 0.58157 https://api.first.org/data/v1/epss?cve=CVE-2004-0488
epss 0.58157 https://api.first.org/data/v1/epss?cve=CVE-2004-0488
epss 0.58157 https://api.first.org/data/v1/epss?cve=CVE-2004-0488
epss 0.58157 https://api.first.org/data/v1/epss?cve=CVE-2004-0488
epss 0.58157 https://api.first.org/data/v1/epss?cve=CVE-2004-0488
epss 0.58157 https://api.first.org/data/v1/epss?cve=CVE-2004-0488
apache_httpd low https://httpd.apache.org/security/json/CVE-2004-0488.json
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0488.json
https://api.first.org/data/v1/epss?cve=CVE-2004-0488
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0488
430867 https://bugzilla.redhat.com/show_bug.cgi?id=430867
CVE-2004-0488 https://httpd.apache.org/security/json/CVE-2004-0488.json
RHSA-2004:245 https://access.redhat.com/errata/RHSA-2004:245
RHSA-2004:342 https://access.redhat.com/errata/RHSA-2004:342
RHSA-2004:405 https://access.redhat.com/errata/RHSA-2004:405
RHSA-2005:816 https://access.redhat.com/errata/RHSA-2005:816
RHSA-2008:0523 https://access.redhat.com/errata/RHSA-2008:0523
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.96167
EPSS Score 0.26607
Published At Aug. 1, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:28:41.918102+00:00 Apache HTTPD Importer Import https://httpd.apache.org/security/json/CVE-2004-0488.json 37.0.0