Think you have a false positive on this rule?

Sid 1-17354

Message

SERVER-APACHE Apache Byte-Range Filter denial of service attempt

Summary

The byte-range filter in Apache 2.0 before 2.0.54 allows remote attackers to cause a denial of service (memory consumption) via an HTTP header with a large Range field.

Impact

CVSS base score 5.0 CVSS impact score 2.9 CVSS exploitability score 10.0 confidentialityImpact NONE integrityImpact NONE availabilityImpact NONE

CVE-2005-2728:

CVSS base score 5.0

CVSS impact score 2.9

CVSS exploitability score 10.0

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

Detailed information

CVE-2005-2728: The byte-range filter in Apache 2.0 before 2.0.54 allows remote attackers to cause a denial of service (memory consumption) via an HTTP header with a large Range field.

Affected systems

apache http_server 2.0
apache http_server 2.0.9
apache http_server 2.0.28
apache http_server 2.0.32
apache http_server 2.0.35
apache http_server 2.0.36
apache http_server 2.0.37
apache http_server 2.0.38
apache http_server 2.0.39
apache http_server 2.0.40
apache http_server 2.0.41
apache http_server 2.0.42
apache http_server 2.0.43
apache http_server 2.0.44
apache http_server 2.0.45
apache http_server 2.0.46
apache http_server 2.0.47
apache http_server 2.0.48
apache http_server 2.0.49
apache http_server 2.0.50
apache http_server 2.0.51
apache http_server 2.0.52
apache http_server 2.0.53

Ease of attack

CVE-2005-2728:

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

False positives

None known

False negatives