apache -- apr_uri_parse IPv6 address handling vulnerability

The Apache Software Foundation Security Team discovered a programming error in the apr-util library function apruriparse. When parsing IPv6 literal addresses, it is possible that a length is incorrectly calculated to be negative, and this value is passed to memcpy. This may result in an exploitab...

DEBIAN-CVE-2004-0397

Stack-based buffer overflow during the aprtimet data conversion in Subversion 1.0.2 and earlier allows remote attackers to execute arbitrary code via a 1 DAV2 REPORT query or 2 get-dated-rev svn-protocol command...

DEBIAN-CVE-2003-0245

Vulnerability in the aprpsprintf function in the Apache Portable Runtime APR library for Apache 2.0.37 through 2.0.45 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via long strings, as demonstrated using XML objects to moddav, and possibly other...

Apache 2.x APR Exploit Code

I had planned to write this tool in C for the sake of using native functionality like crypt3 to support digest authentication. I'd also planned to support intermediate proxies, but a determined user can implement this via various tunneling applications with minimal complications, and I don't need...

CVE-2003-0245

CVE-2003-0245 concerns a vulnerability in the APR library (apr_psprintf) used by Apache 2.0.x, reported for versions 2.0.37–2.0.45. The flaw can crash the server and, in some cases, enable arbitrary code execution when triggered by long strings (notably via mod_dav) and potentially other vectors....