CVE-1999-1053

guestbook.pl cleanses user-inserted SSI commands by removing text between "" separators, which allows remote attackers to execute arbitrary commands when guestbook.pl is run on Apache 1.3.9 and possibly other versions, since Apache allows other closing sequences besides "--"...

CVE-1999-0926

Apache allows remote attackers to conduct a denial of service via a large number of MIME headers...

pbomb.pl

Date: Mon, 22 Feb 1999 15:49:45 -0800 From: [email protected] To: [email protected] Subject: Re: Process table attack from RISKS Digest Apache is also quite vulnerable, at least to a http DOS... It's pretty easy to swamp it by opening HARDSERVERLIMIT connections. It's also usually...

mimeflood.pl

Date: Thu, 3 Sep 1998 12:34:22 +0200 From: Laurent FACQ Subject: Web servers / possible DOS Attack / mime header flooding ! /bin/perl mimeflood.pl - 02/08/1998 - L.Facq [email protected] Web servers / possible DOS Attack / "mime header flooding" looking at the apache 1.2.5 source code i found th...

CVE-1999-0107

Buffer overflow in Apache 1.2.5 and earlier allows a remote attacker to cause a denial of service with a large number of GET requests containing a large number of / characters...

Apache 1.1 / NCSA HTTPd 1.5.2 / Netscape Server 1.12/1.1/2.0 - a nph-test-cgi

Apache Replace with the hostname of a server running a web daemon near you...