CVE-2003-1054

CVE-2003-1054 describes a denial-of-service vulnerability in mod_access_referer version 1.0.2. An attacker can crash the affected Apache module by sending a malformed Referer header that lacks a hostname, leading to a null dereference. This vulnerability has a CVSS score of 5.0, indicating a medium severity, and can be exploited remotely with low attack complexity, resulting in a denial of service. While not listed in CISA's KEV catalog, public exploit code exists, but there is no evidence of active exploitation or significant community discussion.