Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistRedhatCVELIST:CVE-2006-3747
HistoryJul 28, 2006 - 6:00 p.m.

CVE-2006-3747

2006-07-2818:00:00
redhat
www.cve.org

9.6 High

AI Score

Confidence

High

0.974 High

EPSS

Percentile

99.9%

JSON

Off-by-one error in the ldap scheme handling in the Rewrite module (mod_rewrite) in Apache 1.3 from 1.3.28, 2.0.46 and other versions before 2.0.59, and 2.2, when RewriteEngine is enabled, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted URLs that are not properly handled using certain rewrite rules.

References

Related

f5 2
freebsd 1
nessus 32
gentoo 1
openvas 47
debian 2
httpd 3
saint 4
redhatcve 1
securityvulns 4
nvd 1
exploitpack 2
packetstorm 5
seebug 4
slackware 1
ubuntucve 1
checkpoint_advisories 2
debiancve 1
ubuntu 1
cve 1
exploitdb 2
suse 1
cert 1
fedora 1
f5
f5
SOL6878 - Apache Rewrite module (mod_rewrite) vulnerabilities CVE-2006-3747
2007-05-16 00:00:00
K6878 : Apache Rewrite module (mod_rewrite) vulnerabilities CVE-2006-3747
2013-03-19 00:00:00
freebsd
freebsd
apache -- mod_rewrite buffer overflow vulnerability
2006-07-27 00:00:00
nessus
nessus
Debian DSA-1131-1 : apache - buffer overflow
2006-10-14 00:00:00
Mandrake Linux Security Advisory : apache (MDKSA-2006:133)
2006-12-16 00:00:00
Fedora Core 5 : httpd-2.2.2-1.2 (2006-863)
2007-01-17 00:00:00
gentoo
gentoo
Apache: Off-by-one flaw in mod_rewrite
2006-08-01 00:00:00
openvas
openvas
Debian Security Advisory DSA 1131-1 (apache)
2008-01-17 00:00:00
Ubuntu: Security Advisory (USN-328-1)
2022-08-26 00:00:00
FreeBSD Ports: apache
2008-09-04 00:00:00
debian
debian
[SECURITY] [DSA 1131-1] New apache package fix buffer overflow
2006-08-01 10:46:24
[SECURITY] [DSA 1132-1] New apache2 packages fix buffer overflow
2006-08-01 12:57:19
httpd
httpd
Apache Httpd < 2.2.3 : mod_rewrite off-by-one error
2006-07-21 00:00:00
Apache Httpd < 1.3.37 : mod_rewrite off-by-one error
2006-07-21 00:00:00
Apache Httpd < 2.0.59 : mod_rewrite off-by-one error
2006-07-21 00:00:00
saint
saint
Apache mod_rewrite LDAP URL buffer overflow
2007-06-22 00:00:00
Apache mod_rewrite LDAP URL buffer overflow
2007-06-22 00:00:00
Apache mod_rewrite LDAP URL buffer overflow
2007-06-22 00:00:00
redhatcve
redhatcve
CVE-2006-3747
2015-10-30 09:51:27
securityvulns
securityvulns
[Full-disclosure] [Announcement] Apache HTTP Server 2.2.3 &#40;2.0.59, 1.3.37&#41; Released
2006-07-28 00:00:00
[Full-disclosure] [USN-328-1] Apache vulnerability
2006-07-28 00:00:00
POC &amp; exploit for Apache mod_rewrite off-by-one
2006-08-21 00:00:00
nvd
nvd
CVE-2006-3747
2006-07-28 18:02:00
exploitpack
exploitpack
Apache mod_rewrite (Windows x86) - Off-by-One Remote Overflow
2007-04-07 00:00:00
Apache 1.3.372.0.592.2.3 mod_rewrite - Remote Overflow
2006-08-21 00:00:00
packetstorm
packetstorm
apache2058-rewrite.txt
2007-05-31 00:00:00
Apache module mod_rewrite LDAP protocol Buffer Overflow
2009-11-26 00:00:00
modrewrite-offbyone.txt
2007-04-07 00:00:00
seebug
seebug
Apache Mod_Rewrite Off-by-one Remote Overflow Exploit (win32)
2007-04-10 00:00:00
Apache &lt; 1.3.37 2.0.59 2.2.3 (mod_rewrite) Remote Overflow PoC
2006-08-21 00:00:00
Apache < 1.3.37, 2.0.59, 2.2.3 (mod_rewrite) Remote Overflow PoC
2014-07-01 00:00:00
slackware
slackware
[slackware-security] Apache httpd
2006-07-29 00:21:45
ubuntucve
ubuntucve
CVE-2006-3747
2006-07-28 00:00:00
checkpoint_advisories
checkpoint_advisories
Apache Server mod_rewrite Module LDAP Scheme Handling Buffer Overflow (CVE-2006-3747)
2009-09-30 00:00:00
Update Protection against Apache LDAP HTTP Server Buffer Overflow Vulnerability
2006-09-12 00:00:00
debiancve
debiancve
CVE-2006-3747
2006-07-28 18:02:00
ubuntu
ubuntu
Apache vulnerability
2006-07-28 00:00:00
cve
cve
CVE-2006-3747
2006-07-28 18:02:00
exploitdb
exploitdb
Apache mod_rewrite (Windows x86) - Off-by-One Remote Overflow
2007-04-07 00:00:00
Apache &lt; 1.3.37/2.0.59/2.2.3 mod_rewrite - Remote Overflow
2006-08-21 00:00:00
suse
suse
remote denial of service in apache,apache2
2006-07-28 14:21:14
cert
cert
Apache mod_rewrite contains off-by-one error in ldap scheme handling
2006-07-28 00:00:00
fedora
fedora
[SECURITY] Fedora Core 5 Update: httpd-2.2.2-1.3
2007-07-02 15:01:38

9.6 High

AI Score

Confidence

High

0.974 High

EPSS

Percentile

99.9%

JSON
Related for CVELIST:CVE-2006-3747
f52freebsd1nessus32gentoo1openvas47debian2httpd3saint4redhatcve1securityvulns4nvd1exploitpack2packetstorm5seebug4slackware1ubuntucve1checkpoint_advisories2debiancve1ubuntu1cve1exploitdb2suse1cert1fedora1