Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistRedhatCVELIST:CVE-2006-3747
HistoryJul 28, 2006 - 6:00 p.m.

CVE-2006-3747

2006-07-2818:00:00
redhat
www.cve.org

9.6 High

AI Score

Confidence

High

0.974 High

EPSS

Percentile

99.9%

JSON

Off-by-one error in the ldap scheme handling in the Rewrite module (mod_rewrite) in Apache 1.3 from 1.3.28, 2.0.46 and other versions before 2.0.59, and 2.2, when RewriteEngine is enabled, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted URLs that are not properly handled using certain rewrite rules.

References

Related

openvas 47
saint 4
gentoo 1
httpd 3
redhatcve 1
freebsd 1
nessus 32
f5 2
debian 2
checkpoint_advisories 2
seebug 4
packetstorm 5
securityvulns 4
ubuntucve 1
slackware 1
debiancve 1
exploitpack 2
nvd 1
ubuntu 1
cve 1
exploitdb 2
suse 1
cert 1
fedora 1
openvas
openvas
Debian Security Advisory DSA 1131-1 (apache)
2008-01-17 00:00:00
Ubuntu: Security Advisory (USN-328-1)
2022-08-26 00:00:00
Debian: Security Advisory (DSA-1131-1)
2008-01-17 00:00:00
saint
saint
Apache mod_rewrite LDAP URL buffer overflow
2007-06-22 00:00:00
Apache mod_rewrite LDAP URL buffer overflow
2007-06-22 00:00:00
Apache mod_rewrite LDAP URL buffer overflow
2007-06-22 00:00:00
gentoo
gentoo
Apache: Off-by-one flaw in mod_rewrite
2006-08-01 00:00:00
httpd
httpd
Apache Httpd < 2.2.3 : mod_rewrite off-by-one error
2006-07-21 00:00:00
Apache Httpd < 1.3.37 : mod_rewrite off-by-one error
2006-07-21 00:00:00
Apache Httpd < 2.0.59 : mod_rewrite off-by-one error
2006-07-21 00:00:00
redhatcve
redhatcve
CVE-2006-3747
2015-10-30 09:51:27
freebsd
freebsd
apache -- mod_rewrite buffer overflow vulnerability
2006-07-27 00:00:00
nessus
nessus
Debian DSA-1131-1 : apache - buffer overflow
2006-10-14 00:00:00
Fedora Core 5 : httpd-2.2.2-1.2 (2006-863)
2007-01-17 00:00:00
Mandrake Linux Security Advisory : apache (MDKSA-2006:133)
2006-12-16 00:00:00
f5
f5
SOL6878 - Apache Rewrite module (mod_rewrite) vulnerabilities CVE-2006-3747
2007-05-16 00:00:00
K6878 : Apache Rewrite module (mod_rewrite) vulnerabilities CVE-2006-3747
2013-03-19 00:00:00
debian
debian
[SECURITY] [DSA 1131-1] New apache package fix buffer overflow
2006-08-01 00:00:00
[SECURITY] [DSA 1132-1] New apache2 packages fix buffer overflow
2006-08-01 00:00:00
checkpoint_advisories
checkpoint_advisories
Apache Server mod_rewrite Module LDAP Scheme Handling Buffer Overflow (CVE-2006-3747)
2009-09-30 00:00:00
Update Protection against Apache LDAP HTTP Server Buffer Overflow Vulnerability
2006-09-12 00:00:00
seebug
seebug
Apache &lt; 1.3.37 2.0.59 2.2.3 (mod_rewrite) Remote Overflow PoC
2006-08-21 00:00:00
Apache < 1.3.37, 2.0.59, 2.2.3 (mod_rewrite) Remote Overflow PoC
2014-07-01 00:00:00
Apache Mod_Rewrite Off-by-one Remote Overflow Exploit (win32)
2007-04-10 00:00:00
packetstorm
packetstorm
modrewrite-offbyone.txt
2007-04-07 00:00:00
modrewritepoc.txt
2006-08-27 00:00:00
Apache module mod_rewrite LDAP protocol Buffer Overflow
2009-11-26 00:00:00
securityvulns
securityvulns
POC &amp; exploit for Apache mod_rewrite off-by-one
2006-08-21 00:00:00
[Full-disclosure] [Announcement] Apache HTTP Server 2.2.3 &#40;2.0.59, 1.3.37&#41; Released
2006-07-28 00:00:00
[Full-disclosure] [USN-328-1] Apache vulnerability
2006-07-28 00:00:00
ubuntucve
ubuntucve
CVE-2006-3747
2006-07-28 00:00:00
slackware
slackware
[slackware-security] Apache httpd
2006-07-29 00:21:45
debiancve
debiancve
CVE-2006-3747
2006-07-28 18:02:00
exploitpack
exploitpack
Apache mod_rewrite (Windows x86) - Off-by-One Remote Overflow
2007-04-07 00:00:00
Apache 1.3.372.0.592.2.3 mod_rewrite - Remote Overflow
2006-08-21 00:00:00
nvd
nvd
CVE-2006-3747
2006-07-28 18:02:00
ubuntu
ubuntu
Apache vulnerability
2006-07-28 00:00:00
cve
cve
CVE-2006-3747
2006-07-28 18:02:00
exploitdb
exploitdb
Apache &lt; 1.3.37/2.0.59/2.2.3 mod_rewrite - Remote Overflow
2006-08-21 00:00:00
Apache mod_rewrite (Windows x86) - Off-by-One Remote Overflow
2007-04-07 00:00:00
suse
suse
remote denial of service in apache,apache2
2006-07-28 14:21:14
cert
cert
Apache mod_rewrite contains off-by-one error in ldap scheme handling
2006-07-28 00:00:00
fedora
fedora
[SECURITY] Fedora Core 5 Update: httpd-2.2.2-1.3
2007-07-02 15:01:38

9.6 High

AI Score

Confidence

High

0.974 High

EPSS

Percentile

99.9%

JSON
Related for CVELIST:CVE-2006-3747
openvas47saint4gentoo1httpd3redhatcve1freebsd1nessus32f52debian2checkpoint_advisories2seebug4packetstorm5securityvulns4ubuntucve1slackware1debiancve1exploitpack2nvd1ubuntu1cve1exploitdb2suse1cert1fedora1