apache -- ap_resolve_env buffer overflow

SITIC discovered a vulnerability in Apache 2's handling of environmental variable settings in the httpd configuration files the main httpd.conf' and .htaccess' files. According to a SITIC advisory: The buffer overflow occurs when expanding $ENVVAR constructs in .htaccess or httpd.conf files. The...

CVE-2004-0748

modssl in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service CPU consumption by aborting an SSL connection in a way that causes an Apache child process to enter an infinite loop...

CVE-2002-0840

Cross-site scripting XSS vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when UseCanonicalName is "Off" and support for wildcard DNS is present, allows remote attackers to execute script as other web page visitors via the Host: header, a different...

CVE-2002-1156

Apache 2.0.42 allows remote attackers to view the source code of a CGI script via a POST request to a directory with both WebDAV and CGI enabled...

CVE-2004-0173

Directory traversal vulnerability in Apache 1.3.29 and earlier, and Apache 2.0.48 and earlier, when running on Cygwin, allows remote attackers to read arbitrary files via a URL containing "..%5C" dot dot encoded backslash sequences...

CVE-2002-0840

Cross-site scripting XSS vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when UseCanonicalName is "Off" and support for wildcard DNS is present, allows remote attackers to execute script as other web page visitors via the Host: header, a different...

CVE-2003-0993

modaccess in Apache 1.3 before 1.3.30, when running big-endian 64-bit platforms, does not properly parse Allow/Deny rules using IP addresses without a netmask, which could allow remote attackers to bypass intended access restrictions...

CVE-2003-0017

Apache 2.0 before 2.0.44 on Windows platforms allows remote attackers to obtain certain files via an HTTP request that ends in certain illegal characters such as "", which causes a different filename to be processed and served...

GLSA-200407-03 : Apache 2: Remote denial of service attack

The remote host is affected by the vulnerability described in GLSA-200407-03 Apache 2: Remote denial of service attack A bug in the protocol.c file handling header lines will cause Apache to allocate memory for header lines starting with TAB or SPACE. Impact : An attacker can exploit this...

GLSA-200406-05 : Apache: Buffer overflow in mod_ssl

The remote host is affected by the vulnerability described in GLSA-200406-05 Apache: Buffer overflow in modssl A bug in the function sslutiluuencodebinary in sslutil.c may lead to a remote buffer overflow on a server configured to use FakeBasicAuth that will trust a client certificate with an...

Apache < 2.0.46 Multiple Vulnerabilities

Binary data 1443.prm...

Apache < 2.0.44 File Access on Win32

Binary data 1499.prm...

Apache < 2.0.43 HTTP POST Request Source Disclosure

Binary data 1489.prm...

Apache < 2.0.40 Win32 Directory Traversal File Access

Binary data 1498.prm...

Apache < 1.3.31 / 2.0.49 Error Log Escape Sequence Injection

Binary data 1221.prm...

Apache < 2.0.44 MS-DOS Device Name DoS / Code Execution

Binary data 1497.prm...

Apache < 2.0.46 on OS/2 filestat.c Device Name Request DoS

Binary data 1535.prm...

Apache - Arbitrary Long HTTP Headers Denial of Service (C)

Apache - Arbitrary Long HTTP Headers Denial of Service C include include include include include include include include include define A 0x41 define PORT 80 struct sockaddrin hrm; int connchar ip int sockfd; hrm.sinfamily = AFINET; hrm.sinport = htonsPORT; hrm.sinaddr.saddr = inetaddrip;...

Mandrake Linux Security Advisory : apache (MDKSA-2003:103)

A buffer overflow in modalias and modrewrite was discovered in Apache versions 1.3.19 and earlier as well as Apache 2.0.47 and earlier. This happens when a regular expression with more than 9 captures is confined. An attacker would have to create a carefully crafted configuration file .htaccess o...

Apache - Arbitrary Long HTTP Headers Denial of Service (Perl)

Apache - Arbitrary Long HTTP Headers Denial of Service Perl /usr/bin/perl exploit for apache apgetmimeheaderscore vuln adv is here: http://www.guninski.com/httpd1.html version: apache 2 newPeerAddr = $host,PeerPort = $port, Proto = 'tcp' || die "new error$@\n"; binmode$sock; $hostname="Host:...