UnratedFix available
apache2 — security advisory
Unknown vulnerability in Apache 2.0.51 prevents "the merging of the Satisfy directive," which could allow attackers to obtain access to restricted resources contrary to the specified authentication configuration.
- Products
- apache2
- Affected versions
- Not specified
- Fixed versions
- 2.0.52
- CVEs
- CVE-2004-0811
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 14:26 UTC · Revision 1
Source evidence
Unknown vulnerability in Apache 2.0.51 prevents "the merging of the Satisfy directive," which could allow attackers to obtain access to restricted resources contrary to the specified authentication configuration.
osv:DEBIAN-CVE-2004-0811
apache2
Fixed versions: 2.0.52
apache2
Fixed versions: 2.0.52
apache2
Fixed versions: 2.0.52
Complete source record
{
"id": "cd906bf7795c0e77f52dd06379d4f3e3d5d86f6e533af4247de85e34a0740d4b",
"url": "https://osv.dev/vulnerability/DEBIAN-CVE-2004-0811",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "DEBIAN-CVE-2004-0811",
"summary": "Unknown vulnerability in Apache 2.0.51 prevents \"the merging of the Satisfy directive,\" which could allow attackers to obtain access to restricted resources contrary to the specified authentication configuration.",
"evidence": "osv:DEBIAN-CVE-2004-0811",
"products": [
{
"name": {
"value": "apache2",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.0.52",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "apache2",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.0.52",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "apache2",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.0.52",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "DEBIAN-CVE-2004-0811",
"aliases": [
"DEBIAN-CVE-2004-0811"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.0.52"
}
]
}
],
"package": {
"name": "apache2",
"purl": "pkg:deb/debian/apache2?arch=source&distro=bookworm",
"ecosystem": "Debian:12"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2004-0811.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.0.52"
}
]
}
],
"package": {
"name": "apache2",
"purl": "pkg:deb/debian/apache2?arch=source&distro=trixie",
"ecosystem": "Debian:13"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2004-0811.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.0.52"
}
]
}
],
"package": {
"name": "apache2",
"purl": "pkg:deb/debian/apache2?arch=source&distro=forky",
"ecosystem": "Debian:14"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2004-0811.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
}
],
"modified": "2026-10-21T15:47:37.980144907Z",
"provider": "osv",
"upstream": [
"CVE-2004-0811"
],
"references": [
"https://security-tracker.debian.org/tracker/CVE-2004-0811"
]
},
"related_cves": [
{
"value": "CVE-2004-0811",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 394062,
"published_at": "2004-12-31T05:00:00+00:00"
}