CVE-2004-0786: The IPv6 URI parsing routines in the apr-util library for Apache 2.0.50 and earlier allow remote attackers...

Security readout for executives and security teams

CVE-2004-0786 is a remote denial-of-service issue in Apache 2.0.50 and earlier. A specially formed URI can crash an Apache child process through IPv6 URI parsing in apr-util. The sources do not indicate code execution, data theft, or active exploitation. Exposure is most likely on legacy Apache HTTP Server 2.0.50 or earlier deployments, especially internet-facing systems using old Linux distribution packages from the 2004 era. Modern supported Apache deployments are unlikely to be affected, but old embedded, appliance, or forgotten servers should be checked. Treat this as a legacy exposure cleanup item unless affected internet-facing Apache 2.0.50 or earlier systems still exist. Business urgency rises where old public web servers remain in service because remote requests can disrupt availability. Mitigation focus: Retire or upgrade Apache 2.0.50 and earlier installations.; Apply fixed packages from the relevant OS vendor advisory.; Check Apache and distribution guidance for supported upgrade paths..

Prepared

Jun 30, 2026, 02:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.