Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2006-3747HistoryJul 28, 2006 - 6:02 p.m.
CVE-2006-3747
2006-07-2818:02:00
Debian Security Bug Tracker
security-tracker.debian.org
23
7.6 High
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
0.974 High
EPSS
Percentile
99.9%
Off-by-one error in the ldap scheme handling in the Rewrite module (mod_rewrite) in Apache 1.3 from 1.3.28, 2.0.46 and other versions before 2.0.59, and 2.2, when RewriteEngine is enabled, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted URLs that are not properly handled using certain rewrite rules.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | apache2 | <Β 2.0.55-4.1 | apache2_2.0.55-4.1_all.deb |
| Debian | 11 | all | apache2 | <Β 2.0.55-4.1 | apache2_2.0.55-4.1_all.deb |
| Debian | 10 | all | apache2 | <Β 2.0.55-4.1 | apache2_2.0.55-4.1_all.deb |
| Debian | 999 | all | apache2 | <Β 2.0.55-4.1 | apache2_2.0.55-4.1_all.deb |
| Debian | 13 | all | apache2 | <Β 2.0.55-4.1 | apache2_2.0.55-4.1_all.deb |
Related
nessus
nessus
Mandrake Linux Security Advisory : apache (MDKSA-2006:133)
2006-12-16 00:00:00
Fedora Core 5 : httpd-2.2.2-1.2 (2006-863)
2007-01-17 00:00:00
Debian DSA-1131-1 : apache - buffer overflow
2006-10-14 00:00:00
saint
saint
Apache mod_rewrite LDAP URL buffer overflow
2007-06-22 00:00:00
Apache mod_rewrite LDAP URL buffer overflow
2007-06-22 00:00:00
Apache mod_rewrite LDAP URL buffer overflow
2007-06-22 00:00:00
f5
f5
SOL6878 - Apache Rewrite module (mod_rewrite) vulnerabilities CVE-2006-3747
2007-05-16 00:00:00
K6878 : Apache Rewrite module (mod_rewrite) vulnerabilities CVE-2006-3747
2013-03-19 00:00:00
openvas
openvas
Debian Security Advisory DSA 1131-1 (apache)
2008-01-17 00:00:00
Ubuntu: Security Advisory (USN-328-1)
2022-08-26 00:00:00
FreeBSD Ports: apache
2008-09-04 00:00:00
debian
debian
[SECURITY] [DSA 1131-1] New apache package fix buffer overflow
2006-08-01 10:46:24
[SECURITY] [DSA 1132-1] New apache2 packages fix buffer overflow
2006-08-01 12:57:19
httpd
httpd
Apache Httpd < 2.2.3 : mod_rewrite off-by-one error
2006-07-21 00:00:00
Apache Httpd < 1.3.37 : mod_rewrite off-by-one error
2006-07-21 00:00:00
Apache Httpd < 2.0.59 : mod_rewrite off-by-one error
2006-07-21 00:00:00
freebsd
freebsd
apache -- mod_rewrite buffer overflow vulnerability
2006-07-27 00:00:00
gentoo
gentoo
Apache: Off-by-one flaw in mod_rewrite
2006-08-01 00:00:00
exploitpack
exploitpack
Apache 1.3.372.0.592.2.3 mod_rewrite - Remote Overflow
2006-08-21 00:00:00
Apache mod_rewrite (Windows x86) - Off-by-One Remote Overflow
2007-04-07 00:00:00
securityvulns
securityvulns
[Full-disclosure] [USN-328-1] Apache vulnerability
2006-07-28 00:00:00
[Full-disclosure] [Announcement] Apache HTTP Server 2.2.3 (2.0.59, 1.3.37) Released
2006-07-28 00:00:00
POC & exploit for Apache mod_rewrite off-by-one
2006-08-21 00:00:00
packetstorm
packetstorm
apache2058-rewrite.txt
2007-05-31 00:00:00
Apache module mod_rewrite LDAP protocol Buffer Overflow
2009-11-26 00:00:00
apache-mod-rewrite.rb.txt
2008-01-07 00:00:00
seebug
seebug
Apache Mod_Rewrite Off-by-one Remote Overflow Exploit (win32)
2007-04-10 00:00:00
Apache mod_rewrite樑εεεθηΌε²εΊζΊ’εΊζΌζ΄
2006-11-05 00:00:00
Apache < 1.3.37 2.0.59 2.2.3 (mod_rewrite) Remote Overflow PoC
2006-08-21 00:00:00
checkpoint_advisories
checkpoint_advisories
cve
cve
CVE-2006-3747
2006-07-28 18:02:00
ubuntu
ubuntu
Apache vulnerability
2006-07-28 00:00:00
ubuntucve
ubuntucve
CVE-2006-3747
2006-07-28 00:00:00
slackware
slackware
[slackware-security] Apache httpd
2006-07-29 00:21:45
exploitdb
exploitdb
Apache < 1.3.37/2.0.59/2.2.3 mod_rewrite - Remote Overflow
2006-08-21 00:00:00
Apache mod_rewrite (Windows x86) - Off-by-One Remote Overflow
2007-04-07 00:00:00
suse
suse
remote denial of service in apache,apache2
2006-07-28 14:21:14
cert
cert
Apache mod_rewrite contains off-by-one error in ldap scheme handling
2006-07-28 00:00:00
fedora
fedora
[SECURITY] Fedora Core 5 Update: httpd-2.2.2-1.3
2007-07-02 15:01:38
7.6 High
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
0.974 High
EPSS
Percentile
99.9%
Related for DEBIANCVE:CVE-2006-3747