Which products and versions are affected by CVE-2005-1344?

Affected: HTTP Server (Apache) versions 2.0.52; apache2 (debian); rootio-apache2. The full list is in the CVE brief.

Is CVE-2005-1344 being exploited in the wild?

It is not listed in any known-exploited vulnerabilities catalog.

Is CVE-2005-1344 in the CISA KEV catalog?

No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.

Is there a public exploit for CVE-2005-1344?

Public exploit code is available.

Is there a fix for CVE-2005-1344?

Fixed versions are available, including apache2 2.0.54-3, rootio-apache2 2.0.54-3.

How urgently should CVE-2005-1344 be patched?

Brandefense priority: patch immediately, because public exploit code exists for a high-severity flaw.

Request A Demo

WatchlistHigh

CVE-2005-1344HTTP Server Vulnerability

Buffer overflow in htdigest in Apache 2.0.52 may allow attackers to execute arbitrary code via a long realm argument.

Published May 2, 2005 · Updated Aug 4, 2026 · Also known as DEBIAN-CVE-2005-1344

Key Facts

Patch immediately

CVE-2005-1344 is a high-severity vulnerability (CVSS 7.5 v2) affecting HTTP Server (Apache), apache2 (debian), rootio-apache2.
It is not listed in any known-exploited vulnerabilities catalog. Public exploit code is available.
EPSS estimates a 29% probability of exploitation in the next 30 days.
Fixed versions are available, including apache2 2.0.54-3, rootio-apache2 2.0.54-3.
Brandefense priority: patch immediately, because public exploit code exists for a high-severity flaw.

Scores

CVSS v2

7.5

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS (30-day exploit likelihood)

29%

Higher than 98.1% of all scored CVEs

Exploit maturity

Proof of concept

ATLAS score

39/100

Publication score, see How it works

Exploitation Verdict

KEV listed

Not listed

Federal due date

None

No federal due date

Ransomware use

Not reported

Attributed actors

None named

Exploit & Defence Guidance

Exploit maturity

Proof of concept

Public exploit code

Proof-of-concept links

In-the-wild evidence

Reports of active use

Advisories And Exploit References

advisoryhttps://security-tracker.debian.org/tracker/CVE-2005-1344

Description

Buffer overflow in htdigest in Apache 2.0.52 may allow attackers to execute arbitrary code via a long realm argument. NOTE: since htdigest is normally only locally accessible and not setuid or setgid, there are few attack vectors which would lead to an escalation of privileges, unless htdigest is executed from a CGI program. Therefore this may not be a vulnerability.

Affected Products

14 affected entries in total

Product	Affected versions	Fixed in
HTTP ServerApache	2.0.52	n/a
apache2debian	See advisory	2.0.54-3
rootio-apache2rootio	See advisory	2.0.54-3

Patched Releases

apache2

2.0.54-3

rootio-apache2