CVE-2005-2728

CVE-2005-2728 is a medium-severity vulnerability in Apache Http Server with a CVSS 2.0 base score of 5.0. Its EPSS exploit-prediction score of 11% places it in the 95th percentile, indicating an elevated likelihood of exploitation.

Key facts

• Severity: Medium (CVSS 2.0 base score 5.0)
• EPSS exploit prediction: 11% (95th percentile)
• Actively exploited: Not listed in CISA KEV
• Affected product: Apache Http Server
• Published: 2005-08-30
• Last modified: 2026-06-16

Description

The byte-range filter in Apache 2.0 before 2.0.54 allows remote attackers to cause a denial of service (memory consumption) via an HTTP header with a large Range field.

Frequently asked questions

What is CVE-2005-2728?

The byte-range filter in Apache 2.0 before 2.0.54 allows remote attackers to cause a denial of service (memory consumption) via an HTTP header with a large Range field.

How severe is CVE-2005-2728?

CVE-2005-2728 has a CVSS 2.0 base score of 5.0, rated medium severity.

Is CVE-2005-2728 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 11% (95th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2005-2728?

CVE-2005-2728 primarily affects Apache Http Server. In total, 24 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2005-2728?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2005-2728 published?

CVE-2005-2728 was published on 2005-08-30 and last updated on 2026-06-16.

References

• ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U
• http://issues.apache.org/bugzilla/show_bug.cgi?id=29962
• http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html
• http://secunia.com/advisories/16559/
• http://secunia.com/advisories/16705
• http://secunia.com/advisories/16714
• http://secunia.com/advisories/16743
• http://secunia.com/advisories/16746
• http://secunia.com/advisories/16753
• http://secunia.com/advisories/16754
• http://secunia.com/advisories/16769
• http://secunia.com/advisories/16789
• http://secunia.com/advisories/16956
• http://secunia.com/advisories/17036
• http://secunia.com/advisories/17288
• http://secunia.com/advisories/17600
• http://secunia.com/advisories/17831
• http://secunia.com/advisories/17923
• http://secunia.com/advisories/18161
• http://secunia.com/advisories/18333
• http://secunia.com/advisories/18517
• http://secunia.com/advisories/19072
• http://securityreason.com/securityalert/604
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102198-1
• http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm
• http://www.debian.org/security/2005/dsa-805
• http://www.gentoo.org/security/en/glsa/glsa-200508-15.xml
• http://www.mandriva.com/security/advisories?name=MDKSA-2005:161
• http://www.novell.com/linux/security/advisories/2005_51_apache2.html
• http://www.novell.com/linux/security/advisories/2005_52_apache2.html

Affected products (24)

• cpe:2.3:a:apache:http_server:2.0:*:*:*:*:*:*:*
• cpe:2.3:a:apache:http_server:2.0.9:*:*:*:*:*:*:*
• cpe:2.3:a:apache:http_server:2.0.28:*:*:*:*:*:*:*
• cpe:2.3:a:apache:http_server:2.0.28:beta:*:*:*:*:*:*
• cpe:2.3:a:apache:http_server:2.0.32:*:*:*:*:*:*:*
• cpe:2.3:a:apache:http_server:2.0.35:*:*:*:*:*:*:*
• cpe:2.3:a:apache:http_server:2.0.36:*:*:*:*:*:*:*
• cpe:2.3:a:apache:http_server:2.0.37:*:*:*:*:*:*:*
• cpe:2.3:a:apache:http_server:2.0.38:*:*:*:*:*:*:*
• cpe:2.3:a:apache:http_server:2.0.39:*:*:*:*:*:*:*
• cpe:2.3:a:apache:http_server:2.0.40:*:*:*:*:*:*:*
• cpe:2.3:a:apache:http_server:2.0.41:*:*:*:*:*:*:*
• cpe:2.3:a:apache:http_server:2.0.42:*:*:*:*:*:*:*
• cpe:2.3:a:apache:http_server:2.0.43:*:*:*:*:*:*:*
• cpe:2.3:a:apache:http_server:2.0.44:*:*:*:*:*:*:*
• cpe:2.3:a:apache:http_server:2.0.45:*:*:*:*:*:*:*
• cpe:2.3:a:apache:http_server:2.0.46:*:*:*:*:*:*:*
• cpe:2.3:a:apache:http_server:2.0.47:*:*:*:*:*:*:*
• cpe:2.3:a:apache:http_server:2.0.48:*:*:*:*:*:*:*
• cpe:2.3:a:apache:http_server:2.0.49:*:*:*:*:*:*:*
• cpe:2.3:a:apache:http_server:2.0.50:*:*:*:*:*:*:*
• cpe:2.3:a:apache:http_server:2.0.51:*:*:*:*:*:*:*
• cpe:2.3:a:apache:http_server:2.0.52:*:*:*:*:*:*:*
• cpe:2.3:a:apache:http_server:2.0.53:*:*:*:*:*:*:*

More vulnerabilities in Apache Http Server

• CVE-2010-0425 — Critical (CVSS 10.0): modules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2.0 through 2.2.14, and…
• CVE-2005-2700 — Critical (CVSS 10.0): ssl_engine_kernel.c in mod_ssl before 2.8.24, when using "SSLVerifyClient optional" in the global virtual host…
• CVE-2004-0492 — Critical (CVSS 10.0): Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a…
• CVE-2003-0789 — Critical (CVSS 10.0): mod_cgid in Apache before 2.0.48, when using a threaded MPM, does not properly handle CGI redirect paths, which could…
• CVE-1999-1293 — Critical (CVSS 10.0): mod_proxy in Apache 1.2.5 and earlier allows remote attackers to cause a denial of service via malformed FTP commands,…
• CVE-1999-0926 — Critical (CVSS 10.0): Apache allows remote attackers to conduct a denial of service via a large number of MIME headers.

All CVEs affecting Apache Http Server →