CVE-2004-0646
10.0
CVSS v2.0 Base Score
70.95%
HIGH RiskEPSS (99th percentile)
NVD-CWE-Other
Buffer overflow in the WriteToLog function for JRun 3.0 through 4.0 web server connectors, such as (1) mod_jrun and (2) mod_jrun20 for Apache, with verbose logging enabled, allows remote attackers to execute arbitrary code via a long HTTP header Content-Type field or other fields.
Published: 12/23/2004
Modified: 4/16/2026
Vulnerability Summary
CVSS v2 Score
10
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS Score (Exploitation Probability)
70.95%HIGH Exploitation Risk
99th percentile
This vulnerability has a 70.95% probability of being exploited in the next 30 days, ranking higher than 99% of all scored CVEs.
CWE Classification
NVD-CWE-Other