CVE-2003-0189

CVE-2003-0189 describes a denial-of-service vulnerability affecting Apache HTTP Server versions 2.0.40 through 2.0.45 on Unix systems. The flaw resides in the authentication module's unsafe handling of threads when using crypt_r or crypt functions with a threaded Multi-Processing Module (MPM). This can lead to failed Basic authentication attempts, even with valid credentials. The vulnerability has a CVSS score of 5.0, indicating a medium severity. It is easily exploitable over the network with low attack complexity and no authentication required, resulting in a partial denial of service. There is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit or ExploitDB. The CVE has received minimal community discussion and media coverage, suggesting it is not a widely recognized or exploited threat.