274 matches found
Apache < 2.0.51 IPv6 Remote Buffer Overflow
Binary data 2292.prm...
Apache < 2.0.51 ${ENVVAR} Local Overflow
Binary data 2290.prm...
Apache < 2.0.51 mod_dav DAV LOCK Command Remote DoS
Binary data 2291.prm...
apache -- apr_uri_parse IPv6 address handling vulnerability
The Apache Software Foundation Security Team discovered a programming error in the apr-util library function apruriparse. When parsing IPv6 literal addresses, it is possible that a length is incorrectly calculated to be negative, and this value is passed to memcpy. This may result in an exploitab...
apache -- ap_resolve_env buffer overflow
SITIC discovered a vulnerability in Apache 2's handling of environmental variable settings in the httpd configuration files the main httpd.conf' and .htaccess' files. According to a SITIC advisory: The buffer overflow occurs when expanding $ENVVAR constructs in .htaccess or httpd.conf files. The...
CVE-2004-0748
modssl in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service CPU consumption by aborting an SSL connection in a way that causes an Apache child process to enter an infinite loop...
CVE-2002-0840
Cross-site scripting XSS vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when UseCanonicalName is "Off" and support for wildcard DNS is present, allows remote attackers to execute script as other web page visitors via the Host: header, a different...
CVE-2002-1156
Apache 2.0.42 allows remote attackers to view the source code of a CGI script via a POST request to a directory with both WebDAV and CGI enabled...
CVE-2004-0173
Directory traversal vulnerability in Apache 1.3.29 and earlier, and Apache 2.0.48 and earlier, when running on Cygwin, allows remote attackers to read arbitrary files via a URL containing "..%5C" dot dot encoded backslash sequences...
CVE-2003-0993
modaccess in Apache 1.3 before 1.3.30, when running big-endian 64-bit platforms, does not properly parse Allow/Deny rules using IP addresses without a netmask, which could allow remote attackers to bypass intended access restrictions...
CVE-2003-0017
Apache 2.0 before 2.0.44 on Windows platforms allows remote attackers to obtain certain files via an HTTP request that ends in certain illegal characters such as "", which causes a different filename to be processed and served...
CVE-2002-0840
Cross-site scripting XSS vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when UseCanonicalName is "Off" and support for wildcard DNS is present, allows remote attackers to execute script as other web page visitors via the Host: header, a different...
GLSA-200407-03 : Apache 2: Remote denial of service attack
The remote host is affected by the vulnerability described in GLSA-200407-03 Apache 2: Remote denial of service attack A bug in the protocol.c file handling header lines will cause Apache to allocate memory for header lines starting with TAB or SPACE. Impact : An attacker can exploit this...
GLSA-200406-05 : Apache: Buffer overflow in mod_ssl
The remote host is affected by the vulnerability described in GLSA-200406-05 Apache: Buffer overflow in modssl A bug in the function sslutiluuencodebinary in sslutil.c may lead to a remote buffer overflow on a server configured to use FakeBasicAuth that will trust a client certificate with an...
Apache < 2.0.44 File Access on Win32
Binary data 1499.prm...
Apache < 2.0.46 Multiple Vulnerabilities
Binary data 1443.prm...
Apache < 2.0.40 Win32 Directory Traversal File Access
Binary data 1498.prm...
Apache < 2.0.43 HTTP POST Request Source Disclosure
Binary data 1489.prm...