Lucene search
Ubuntu.comUB:CVE-2006-3747HistoryJul 28, 2006 - 12:00 a.m.
CVE-2006-3747
2006-07-2800:00:00
ubuntu.com
ubuntu.com
14
7.6 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
0.974 High
EPSS
Percentile
99.9%
Off-by-one error in the ldap scheme handling in the Rewrite module
(mod_rewrite) in Apache 1.3 from 1.3.28, 2.0.46 and other versions before
2.0.59, and 2.2, when RewriteEngine is enabled, allows remote attackers to
cause a denial of service (application crash) and possibly execute
arbitrary code via crafted URLs that are not properly handled using certain
rewrite rules.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 6.06 | noarch | apache | <Β 1.3.34-2ubuntu0.1 | UNKNOWN |
| ubuntu | 6.10 | noarch | apache | <Β 1.3.34-4ubuntu1 | UNKNOWN |
| ubuntu | 7.04 | noarch | apache | <Β 1.3.34-4ubuntu1 | UNKNOWN |
| ubuntu | 6.06 | noarch | apache2 | <Β 2.0.55-4ubuntu2.2 | UNKNOWN |
| ubuntu | 6.10 | noarch | apache2 | <Β 2.0.55-4ubuntu4.1 | UNKNOWN |
| ubuntu | 7.04 | noarch | apache2 | <Β 2.2.3-3.2ubuntu0.1 | UNKNOWN |
Related
f5
f5
SOL6878 - Apache Rewrite module (mod_rewrite) vulnerabilities CVE-2006-3747
2007-05-16 00:00:00
K6878 : Apache Rewrite module (mod_rewrite) vulnerabilities CVE-2006-3747
2013-03-19 00:00:00
freebsd
freebsd
apache -- mod_rewrite buffer overflow vulnerability
2006-07-27 00:00:00
nessus
nessus
Debian DSA-1131-1 : apache - buffer overflow
2006-10-14 00:00:00
Mandrake Linux Security Advisory : apache (MDKSA-2006:133)
2006-12-16 00:00:00
Fedora Core 5 : httpd-2.2.2-1.2 (2006-863)
2007-01-17 00:00:00
gentoo
gentoo
Apache: Off-by-one flaw in mod_rewrite
2006-08-01 00:00:00
openvas
openvas
Debian Security Advisory DSA 1131-1 (apache)
2008-01-17 00:00:00
Ubuntu: Security Advisory (USN-328-1)
2022-08-26 00:00:00
FreeBSD Ports: apache
2008-09-04 00:00:00
debian
debian
[SECURITY] [DSA 1131-1] New apache package fix buffer overflow
2006-08-01 10:46:24
[SECURITY] [DSA 1132-1] New apache2 packages fix buffer overflow
2006-08-01 12:57:19
httpd
httpd
Apache Httpd < 2.2.3 : mod_rewrite off-by-one error
2006-07-21 00:00:00
Apache Httpd < 1.3.37 : mod_rewrite off-by-one error
2006-07-21 00:00:00
Apache Httpd < 2.0.59 : mod_rewrite off-by-one error
2006-07-21 00:00:00
saint
saint
Apache mod_rewrite LDAP URL buffer overflow
2007-06-22 00:00:00
Apache mod_rewrite LDAP URL buffer overflow
2007-06-22 00:00:00
Apache mod_rewrite LDAP URL buffer overflow
2007-06-22 00:00:00
redhatcve
redhatcve
CVE-2006-3747
2015-10-30 09:51:27
securityvulns
securityvulns
[Full-disclosure] [Announcement] Apache HTTP Server 2.2.3 (2.0.59, 1.3.37) Released
2006-07-28 00:00:00
[Full-disclosure] [USN-328-1] Apache vulnerability
2006-07-28 00:00:00
POC & exploit for Apache mod_rewrite off-by-one
2006-08-21 00:00:00
cvelist
cvelist
CVE-2006-3747
2006-07-28 18:00:00
nvd
nvd
CVE-2006-3747
2006-07-28 18:02:00
exploitpack
exploitpack
Apache mod_rewrite (Windows x86) - Off-by-One Remote Overflow
2007-04-07 00:00:00
Apache 1.3.372.0.592.2.3 mod_rewrite - Remote Overflow
2006-08-21 00:00:00
packetstorm
packetstorm
apache2058-rewrite.txt
2007-05-31 00:00:00
Apache module mod_rewrite LDAP protocol Buffer Overflow
2009-11-26 00:00:00
modrewrite-offbyone.txt
2007-04-07 00:00:00
seebug
seebug
Apache Mod_Rewrite Off-by-one Remote Overflow Exploit (win32)
2007-04-10 00:00:00
Apache < 1.3.37 2.0.59 2.2.3 (mod_rewrite) Remote Overflow PoC
2006-08-21 00:00:00
Apache < 1.3.37, 2.0.59, 2.2.3 (mod_rewrite) Remote Overflow PoC
2014-07-01 00:00:00
slackware
slackware
[slackware-security] Apache httpd
2006-07-29 00:21:45
checkpoint_advisories
checkpoint_advisories
debiancve
debiancve
CVE-2006-3747
2006-07-28 18:02:00
ubuntu
ubuntu
Apache vulnerability
2006-07-28 00:00:00
cve
cve
CVE-2006-3747
2006-07-28 18:02:00
exploitdb
exploitdb
Apache mod_rewrite (Windows x86) - Off-by-One Remote Overflow
2007-04-07 00:00:00
Apache < 1.3.37/2.0.59/2.2.3 mod_rewrite - Remote Overflow
2006-08-21 00:00:00
suse
suse
remote denial of service in apache,apache2
2006-07-28 14:21:14
cert
cert
Apache mod_rewrite contains off-by-one error in ldap scheme handling
2006-07-28 00:00:00
fedora
fedora
[SECURITY] Fedora Core 5 Update: httpd-2.2.2-1.3
2007-07-02 15:01:38
7.6 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
0.974 High
EPSS
Percentile
99.9%
Related for UB:CVE-2006-3747