Lucene search
UbuntuUSN-328-1HistoryJul 28, 2006 - 12:00 a.m.
Apache vulnerability
2006-07-2800:00:00
ubuntu.com
43
7.7 High
AI Score
Confidence
Low
7.6 High
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
0.974 High
EPSS
Percentile
99.9%
Releases
- Ubuntu 6.06
- Ubuntu 5.10
- Ubuntu 5.04
Details
Mark Dowd discovered an off-by-one buffer overflow in the mod_rewrite
moduleβs ldap scheme handling. On systems which activate
βRewriteEngine onβ, a remote attacker could exploit certain rewrite
rules to crash Apache, or potentially even execute arbitrary code
(this has not been verified).
βRewriteEngine onβ is disabled by default. Systems which have this
directive disabled are not affected at all.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 6.06 | noarch | apache2-mpm-worker | <Β 2.0.55-4ubuntu2.1 | UNKNOWN |
| Ubuntu | 6.06 | noarch | apache2-mpm-perchild | <Β 2.0.55-4ubuntu2.1 | UNKNOWN |
| Ubuntu | 6.06 | noarch | apache2-mpm-prefork | <Β 2.0.55-4ubuntu2.1 | UNKNOWN |
| Ubuntu | 5.10 | noarch | apache2-mpm-worker | <Β 2.0.54-5ubuntu4.1 | UNKNOWN |
| Ubuntu | 5.10 | noarch | apache2-mpm-perchild | <Β 2.0.54-5ubuntu4.1 | UNKNOWN |
| Ubuntu | 5.10 | noarch | apache2-mpm-prefork | <Β 2.0.54-5ubuntu4.1 | UNKNOWN |
| Ubuntu | 5.10 | noarch | apache2-mpm-threadpool | <Β 2.0.54-5ubuntu4.1 | UNKNOWN |
| Ubuntu | 5.04 | noarch | apache2-mpm-worker | <Β 2.0.53-5ubuntu5.6 | UNKNOWN |
| Ubuntu | 5.04 | noarch | apache2-mpm-perchild | <Β 2.0.53-5ubuntu5.6 | UNKNOWN |
| Ubuntu | 5.04 | noarch | apache2-mpm-prefork | <Β 2.0.53-5ubuntu5.6 | UNKNOWN |
References
Related
nessus
nessus
Mandrake Linux Security Advisory : apache (MDKSA-2006:133)
2006-12-16 00:00:00
Fedora Core 5 : httpd-2.2.2-1.2 (2006-863)
2007-01-17 00:00:00
Debian DSA-1131-1 : apache - buffer overflow
2006-10-14 00:00:00
saint
saint
Apache mod_rewrite LDAP URL buffer overflow
2007-06-22 00:00:00
Apache mod_rewrite LDAP URL buffer overflow
2007-06-22 00:00:00
Apache mod_rewrite LDAP URL buffer overflow
2007-06-22 00:00:00
f5
f5
SOL6878 - Apache Rewrite module (mod_rewrite) vulnerabilities CVE-2006-3747
2007-05-16 00:00:00
K6878 : Apache Rewrite module (mod_rewrite) vulnerabilities CVE-2006-3747
2013-03-19 00:00:00
openvas
openvas
Debian Security Advisory DSA 1131-1 (apache)
2008-01-17 00:00:00
Ubuntu: Security Advisory (USN-328-1)
2022-08-26 00:00:00
FreeBSD Ports: apache
2008-09-04 00:00:00
debian
debian
[SECURITY] [DSA 1131-1] New apache package fix buffer overflow
2006-08-01 10:46:24
[SECURITY] [DSA 1132-1] New apache2 packages fix buffer overflow
2006-08-01 12:57:19
httpd
httpd
Apache Httpd < 2.2.3 : mod_rewrite off-by-one error
2006-07-21 00:00:00
Apache Httpd < 1.3.37 : mod_rewrite off-by-one error
2006-07-21 00:00:00
Apache Httpd < 2.0.59 : mod_rewrite off-by-one error
2006-07-21 00:00:00
freebsd
freebsd
apache -- mod_rewrite buffer overflow vulnerability
2006-07-27 00:00:00
gentoo
gentoo
Apache: Off-by-one flaw in mod_rewrite
2006-08-01 00:00:00
exploitpack
exploitpack
Apache 1.3.372.0.592.2.3 mod_rewrite - Remote Overflow
2006-08-21 00:00:00
Apache mod_rewrite (Windows x86) - Off-by-One Remote Overflow
2007-04-07 00:00:00
securityvulns
securityvulns
[Full-disclosure] [USN-328-1] Apache vulnerability
2006-07-28 00:00:00
[Full-disclosure] [Announcement] Apache HTTP Server 2.2.3 (2.0.59, 1.3.37) Released
2006-07-28 00:00:00
POC & exploit for Apache mod_rewrite off-by-one
2006-08-21 00:00:00
packetstorm
packetstorm
apache2058-rewrite.txt
2007-05-31 00:00:00
Apache module mod_rewrite LDAP protocol Buffer Overflow
2009-11-26 00:00:00
apache-mod-rewrite.rb.txt
2008-01-07 00:00:00
seebug
seebug
Apache Mod_Rewrite Off-by-one Remote Overflow Exploit (win32)
2007-04-10 00:00:00
Apache mod_rewrite樑εεεθηΌε²εΊζΊ’εΊζΌζ΄
2006-11-05 00:00:00
Apache < 1.3.37 2.0.59 2.2.3 (mod_rewrite) Remote Overflow PoC
2006-08-21 00:00:00
checkpoint_advisories
checkpoint_advisories
cve
cve
CVE-2006-3747
2006-07-28 18:02:00
ubuntucve
ubuntucve
CVE-2006-3747
2006-07-28 00:00:00
slackware
slackware
[slackware-security] Apache httpd
2006-07-29 00:21:45
debiancve
debiancve
CVE-2006-3747
2006-07-28 18:02:00
exploitdb
exploitdb
Apache mod_rewrite (Windows x86) - Off-by-One Remote Overflow
2007-04-07 00:00:00
Apache < 1.3.37/2.0.59/2.2.3 mod_rewrite - Remote Overflow
2006-08-21 00:00:00
suse
suse
remote denial of service in apache,apache2
2006-07-28 14:21:14
cert
cert
Apache mod_rewrite contains off-by-one error in ldap scheme handling
2006-07-28 00:00:00
fedora
fedora
[SECURITY] Fedora Core 5 Update: httpd-2.2.2-1.3
2007-07-02 15:01:38
7.7 High
AI Score
Confidence
Low
7.6 High
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
0.974 High
EPSS
Percentile
99.9%
Related for USN-328-1