Intrusion PreventionApache.Long.Header.DoS
Description
This indicates that an attacker may have attempted to launch a Denial of Service attack against Apache Web Server.
Apache Web Server is vulnerable to a Denial of Service attack because the server does not adequately handle long HTTP header strings. If an attacker supplies an HTTP request with a sufficiently long header string, Apache will crash.
Affected Products
Apache Software Foundation Apache 2.0.47 - 2.0.49
Impact
Denial of Service.
Recommended Actions
Apply the appropriate patch from the vendor or upgrade to a non-vulnerable version.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2019-04-15 | 14.594 | Sig Added |
| 2019-04-15 | 14.593 | Sig Added |
| 2019-04-11 | 14.591 | Sig Added |
| ID | 11206 |
| Created | Oct 07, 2005 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2004-0493 |
| Exploit Prediction Score | 96.23% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux, BSD, Solaris |
| Affected App | Apache |