FreeBSD91ECB546-B1E6-11E3-980F-20CF30E32F6D

HistoryFeb 25, 2014 - 12:00 a.m.

apache -- several vulnerabilities

2014-02-2500:00:00

vuxml.freebsd.org

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.224 Low

EPSS

Percentile

96.4%

JSON

Apache HTTP SERVER PROJECT reports:

Clean up cookie logging with fewer redundant string parsing passes.
Log only cookies with a value assignment. Prevents segfaults when
logging truncated cookies.
mod_dav: Keep track of length of cdata properly when removing leading
spaces. Eliminates a potential denial of service from specifically
crafted DAV WRITE requests.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchapache24< 2.4.9UNKNOWN
FreeBSDanynoarchapache22< 2.2.27UNKNOWN
FreeBSDanynoarchapache22-event-mpm< 2.2.27UNKNOWN
FreeBSDanynoarchapache22-itk-mpm< 2.2.27UNKNOWN
FreeBSDanynoarchapache22-peruser-mpm< 2.2.27UNKNOWN
FreeBSDanynoarchapache22-worker-mpm< 2.2.27UNKNOWN

OS	Version	Architecture	Package	Version	Filename
FreeBSD	any	noarch	apache24	< 2.4.9	UNKNOWN
FreeBSD	any	noarch	apache22	< 2.2.27	UNKNOWN
FreeBSD	any	noarch	apache22-event-mpm	< 2.2.27	UNKNOWN
FreeBSD	any	noarch	apache22-itk-mpm	< 2.2.27	UNKNOWN
FreeBSD	any	noarch	apache22-peruser-mpm	< 2.2.27	UNKNOWN
FreeBSD	any	noarch	apache22-worker-mpm	< 2.2.27	UNKNOWN

nessus 47

openvas 34

ibm 14

kaspersky 1

oraclelinux 2

securityvulns 8

mageia 1

redhat 6

amazon 2

fedora 2

threatpost 1

seebug 1

slackware 1

centos 2

ubuntu 1

gentoo 1

suse 5

httpd 4

prion 2

checkpoint_advisories 1

cve 2

debiancve 2

ubuntucve 2

f5 4

veracode 2

hackerone 2

osv 1

debian 1

oracle 2

nessus

FreeBSD : apache -- several vulnerabilities (91ecb546-b1e6-11e3-980f-20cf30e32f6d)

2014-03-24 00:00:00

Slackware 14.0 / 14.1 / current : httpd (SSA:2014-086-02)

2014-03-31 00:00:00

Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.10 : apache2 vulnerabilities (USN-2152-1)

2014-03-25 00:00:00

openvas

RedHat Update for httpd RHSA-2014:0370-01

2014-04-08 00:00:00

CentOS Update for httpd CESA-2014:0370 centos6

2014-04-08 00:00:00

Oracle: Security Advisory (ELSA-2014-0370)

2015-10-06 00:00:00

ibm

Security Bulletin: IBM InfoSphere Balanced Warehouse C3000, C4000, IBM Smart Analytics System 1050, and 2050 are affected by the following Apache Tomcat vulnerabilities: CVE-2014-0098 and CVE-2013-6438

2018-06-16 13:57:53

Security Bulletin: Network Intrusion Prevention System is affected by multiple Apache web server vulnerabilities (CVE-2013-6438, CVE-2014-0098, CVE-2014-0226, CVE-2014-0231)

2022-02-23 19:21:55

Security Bulletin: Vulnerabilities in Apache affect the IBM Flex System Manager (FSM): (CVE-2013-6438, CVE-2014-0098, CVE-2014-0226, CVE-2014-0231)

2019-01-31 01:35:01

kaspersky

KLA10067 DoS vulnerabilities in Apache httpd

2014-03-26 00:00:00

oraclelinux

httpd security update

2014-04-03 00:00:00

httpd security update

2014-04-03 00:00:00

securityvulns

[ MDVSA-2014:065 ] apache

2014-03-24 00:00:00

Apache security vulnerabilities

2014-03-24 00:00:00

APPLE-SA-2014-10-16-1 OS X Yosemite v10.10

2014-10-18 00:00:00

mageia

Updated apache packages fix security vulnerabilities

2014-03-19 21:40:14

redhat

(RHSA-2014:0369) Moderate: httpd security update

2014-04-03 00:00:00

(RHSA-2014:0370) Moderate: httpd security update

2014-04-03 00:00:00

(RHSA-2014:0783) Moderate: Red Hat JBoss Web Server 2.0.1 httpd security and bug fix update

2014-06-23 17:50:43

amazon

Medium: httpd

2014-04-25 16:00:00

Medium: httpd24

2014-03-24 23:33:00

fedora

[SECURITY] Fedora 19 Update: httpd-2.4.9-1.fc19

2014-04-23 04:33:29

[SECURITY] Fedora 20 Update: httpd-2.4.9-2.fc20

2014-03-31 02:16:57

threatpost

Apache Update Resolves Security Vulnerabilities

2014-03-18 12:51:25

seebug

Apache HTTP Server多个拒绝服务漏洞

2014-03-20 00:00:00

slackware

[slackware-security] httpd

2014-03-28 22:54:00

centos

httpd, mod_ssl security update

2014-04-04 00:08:57

httpd, mod_ssl security update

2014-04-04 00:04:54

ubuntu

Apache HTTP Server vulnerabilities

2014-03-24 00:00:00

gentoo

Apache HTTP Server: Multiple vulnerabilities

2014-08-29 00:00:00

suse

Security update for apache2 (important)

2014-09-02 19:04:20

Security update for the Apache Web Server (important)

2014-08-07 01:04:17

Security update for apache2 (important)

2014-09-02 20:04:23

httpd

Apache Httpd < 2.4.9 : mod_dav crash

2013-12-10 00:00:00

Apache Httpd < 2.2.27 : mod_log_config crash

2014-02-25 00:00:00

Apache Httpd < 2.2.27 : mod_dav crash

2013-12-10 00:00:00

prion

Cross site request forgery (csrf)

2014-03-18 05:18:00

Information disclosure

2014-03-18 05:18:00

checkpoint_advisories

Apache HTTP Server mod_log_config Denial of Service (CVE-2014-0098)

2014-04-02 00:00:00

cve

CVE-2014-0098

2014-03-18 05:18:00

CVE-2013-6438

2014-03-18 05:18:00

debiancve

CVE-2013-6438

2014-03-18 05:18:00

CVE-2014-0098

2014-03-18 05:18:00

ubuntucve

CVE-2013-6438

2014-03-18 00:00:00

CVE-2014-0098

2014-03-18 00:00:00

K15300 : Apache HTTP Server mod_dav DoS vulnerability CVE-2013-6438

2014-12-12 00:00:00

SOL15300 - Apache HTTP Server mod_dav DoS vulnerability CVE-2013-6438

2014-06-02 00:00:00

K15320 : Apache vulnerability CVE-2014-0098

2014-12-12 00:00:00

veracode

Denial Of Service (Dos)

2019-01-15 08:54:20

Denial Of Service (DoS)

2019-05-02 04:58:46

hackerone

Marktplaats: Multiple Apache 2.2.22 Vulnerabilities (XSS/ Code Exec/ DoS)

2015-06-09 17:47:58

U.S. Dept Of Defense: Out-of-date Version (Apache)

2016-11-24 15:09:27

osv

apache2 - security update

2014-09-29 00:00:00

debian

[SECURITY] [DLA 66-1] apache2 security update

2014-09-29 13:40:41

oracle

Oracle Critical Patch Update - July 2014

2014-07-15 00:00:00

Oracle Critical Patch Update Advisory - January 2015

2015-03-10 00:00:00

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.224 Low

EPSS

Percentile

96.4%

JSON

Related for 91ECB546-B1E6-11E3-980F-20CF30E32F6D