Vulnerability
CVE-2004-0809
CVE-2004-0809 is a medium-severity vulnerability (CVSS v2 5.0). As of 2026-10-20, 429 hosts in our data show software it affects on an open service in at least 15 countries.
The mod_dav module in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (child process crash) via a certain sequence of LOCK requests for a location that allows WebDAV authoring access.
- Published
- 2004-09-16
- Last modified
- 2026-06-16
- CVSS score
- 5.0 CVSS v2
- CVSS vector (v2)
- AV:N/AC:L/Au:N/C:N/I:N/A:P
- Exploit likelihood (EPSS)
- 17.2% in the next 30 days (top 3% of CVEs)
Exposure in our data
429 hosts
Hosts whose banner shows an affected software version on a service open at their latest check.
Not counted: 21 hosts with this CVE only from an older observation.
Not counted: 275 hosts where the software version is too vague to tell (only a major release).
Not counted: 91 more on distribution builds that may be patched (the distribution may have backported the fix without changing the version).
Not counted: 1 host whose data looks unreliable.
3 more hosts had it earlier (the software version has since changed or the service is gone).
Counted 2026-10-20 04:20 UTC
By country
| United States US | 366 |
| China CN | 8 |
| Sweden SE | 6 |
| Indonesia ID | 5 |
| Canada CA | 3 |
| Germany DE | 3 |
| Spain ES | 3 |
| Finland FI | 3 |
| Malaysia MY | 3 |
| South Africa ZA | 3 |
| Austria AT | 2 |
| Australia AU | 2 |
| France FR | 2 |
| Italy IT | 2 |
| Japan JP | 2 |
Affected software seen
| http_server 2.0.46 | 364 |
| http_server 2.0.47 | 30 |
| http_server 2.0.48 | 14 |
| http_server 2.0.49 | 8 |
| http_server 2.0.39 | 3 |
| http_server 2.0.40 | 3 |
| http_server 2.0.43 | 3 |
| http_server 2.0.50 | 3 |
| http_server 2.0.45 | 1 |