Back
CVE-2004-2343
Apache HTTP Server 2.0.47 and earlier allows local users to bypass .htaccess file restrictions, as specified in httpd.conf with directives…
High7.2EPSS 0.60%
- Published
- Updated
- Reserved
- Assigned by
- mitre
Description
Apache HTTP Server 2.0.47 and earlier allows local users to bypass .htaccess file restrictions, as specified in httpd.conf with directives such as Deny From All, by using an ErrorDocument directive. NOTE: the vendor has disputed this issue, since the .htaccess mechanism is only intended to restrict external web access, and a local user already has the privileges to perform the same operations without using ErrorDocument
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 2.0 | High7.2 | AV:L/AC:L/Au:N/C:C/I:C/A:C |
- EPSS (exploitation in 30 days)
- 0.60% · top 51% of all CVEs (4 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.2.
Weakness
- n/a
Affected products
n/a
- affected n/a
References (4)
- 20040202 Re: BUG IN APACHE HTTPD SERVER (current version 2.0.47) (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
- 20040204 Re: BUG IN APACHE HTTPD SERVER (current version 2.0.47) (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
- apache-httpd-bypass-restriction(15015) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
- 20040131 BUG IN APACHE HTTPD SERVER (current version 2.0.47) (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2004-2343)Record last updated .