Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:apache/httpd@1.3.0
purl pkg:apache/httpd@1.3.0
Next non-vulnerable version 2.0.65
Latest non-vulnerable version 2.4.54
Risk 10.0
Vulnerabilities affecting this package (16)
Vulnerability Summary Fixed by
VCID-292q-gt7d-57h4
Aliases:
CVE-1999-1199
A serious problem exists when a client sends a large number of headers with the same header name. Apache uses up memory faster than the amount of memory required to simply store the received data itself. That is, memory use increases faster and faster as more headers are received, rather than increasing at a constant rate. This makes a denial of service attack based on this method more effective than methods which cause Apache to use memory at a constant rate, since the attacker has to send less data.
1.3.2
Affected by 19 other vulnerabilities.
VCID-3m9y-maes-5ycp
Aliases:
CVE-2003-0020
Apache does not filter terminal escape sequences from error logs, which could make it easier for attackers to insert those sequences into terminal emulators containing vulnerabilities related to escape sequences.
1.3.31
Affected by 11 other vulnerabilities.
2.0.49
Affected by 44 other vulnerabilities.
VCID-a86d-f4nd-eqhh
Aliases:
CVE-2003-0083
Apache did not filter terminal escape sequences from its access logs, which could make it easier for attackers to insert those sequences into terminal emulators containing vulnerabilities related to escape sequences.
1.3.26
Affected by 17 other vulnerabilities.
2.0.46
Affected by 51 other vulnerabilities.
VCID-bu8e-hpcy-jqda
Aliases:
CVE-2002-0839
The permissions of the shared memory used for the scoreboard allows an attacker who can execute under the Apache UID to send a signal to any process as root or cause a local denial of service attack.
1.3.27
Affected by 15 other vulnerabilities.
VCID-d5w4-vnbd-afdj
Aliases:
CVE-2002-0392
Malicious requests can cause various effects ranging from a relatively harmless increase in system resources through to denial of service attacks and in some cases the ability to execute arbitrary remote code.
1.3.26
Affected by 17 other vulnerabilities.
2.0.37
Affected by 55 other vulnerabilities.
VCID-dqkp-f1my-dbg9
Aliases:
CVE-2007-5000
A flaw was found in the mod_imagemap module. On sites where mod_imagemap is enabled and an imagemap file is publicly available, a cross-site scripting attack is possible.
1.3.41
Affected by 2 other vulnerabilities.
2.0.63
Affected by 19 other vulnerabilities.
2.2.8
Affected by 49 other vulnerabilities.
VCID-e2sp-bna5-mqb6
Aliases:
CVE-2003-0993
A bug in the parsing of Allow/Deny rules using IP addresses without a netmask on big-endian 64-bit platforms causes the rules to fail to match.
1.3.31
Affected by 11 other vulnerabilities.
VCID-kcwg-hswv-2uf7
Aliases:
CVE-2005-3352
A flaw in mod_imap when using the Referer directive with image maps. In certain site configurations a remote attacker could perform a cross-site scripting attack if a victim can be forced to visit a malicious URL using certain web browsers.
1.3.35
Affected by 7 other vulnerabilities.
2.0.58
Affected by 27 other vulnerabilities.
2.2.2
Affected by 59 other vulnerabilities.
VCID-nkgw-gs9g-ckft
Aliases:
CVE-2002-0840
Cross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when UseCanonicalName is "Off" and support for wildcard DNS is present, allows remote attackers to execute script as other web page visitors via the Host: header.
1.3.27
Affected by 15 other vulnerabilities.
2.0.43
Affected by 55 other vulnerabilities.
VCID-sgfs-58ym-fygd
Aliases:
CVE-2001-0730
A vulnerability was found in the split-logfile support program. A request with a specially crafted Host: header could allow any file with a .log extension on the system to be written to.
1.3.22
Affected by 19 other vulnerabilities.
VCID-sn3y-mpbk-hqe8
Aliases:
CVE-2002-0843
Buffer overflows in the benchmarking utility ab could be exploited if ab is run against a malicious server
1.3.27
Affected by 15 other vulnerabilities.
VCID-srxw-jjvr-p3d5
Aliases:
CVE-2007-3304
The Apache HTTP server did not verify that a process was an Apache child process before sending it signals. A local attacker with the ability to run scripts on the HTTP server could manipulate the scoreboard and cause arbitrary processes to be terminated which could lead to a denial of service.
1.3.39
Affected by 4 other vulnerabilities.
2.0.61
Affected by 22 other vulnerabilities.
2.2.6
Affected by 54 other vulnerabilities.
VCID-ug4a-zxkg-cbew
Aliases:
CVE-2003-0987
mod_digest does not properly verify the nonce of a client response by using a AuthNonce secret. This could allow a malicious user who is able to sniff network traffic to conduct a replay attack against a website using Digest protection. Note that mod_digest implements an older version of the MD5 Digest Authentication specification which is known not to work with modern browsers. This issue does not affect mod_auth_digest.
1.3.31
Affected by 11 other vulnerabilities.
VCID-vj4e-mzff-9qfw
Aliases:
CVE-2000-1205
Apache was vulnerable to cross site scripting issues. It was shown that malicious HTML tags can be embedded in client web requests if the server or script handling the request does not carefully encode all information displayed to the user. Using these vulnerabilities attackers could, for example, obtain copies of your private cookies used to authenticate you to other sites.
1.3.12
Affected by 23 other vulnerabilities.
VCID-yjqs-kszf-yka1
Aliases:
CVE-2003-0542
By using a regular expression with more than 9 captures a buffer overflow can occur in mod_alias or mod_rewrite. To exploit this an attacker would need to be able to create a carefully crafted configuration file (.htaccess or httpd.conf)
1.3.29
Affected by 15 other vulnerabilities.
2.0.48
Affected by 46 other vulnerabilities.
VCID-zn9e-rcpj-yuax
Aliases:
CVE-2004-0940
A buffer overflow in mod_include could allow a local user who is authorised to create server side include (SSI) files to gain the privileges of a httpd child.
1.3.33
Affected by 9 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T12:36:14.568674+00:00 Apache HTTPD Importer Affected by VCID-dqkp-f1my-dbg9 https://httpd.apache.org/security/json/CVE-2007-5000.json 38.0.0
2026-04-01T12:36:14.216525+00:00 Apache HTTPD Importer Affected by VCID-srxw-jjvr-p3d5 https://httpd.apache.org/security/json/CVE-2007-3304.json 38.0.0
2026-04-01T12:36:13.408768+00:00 Apache HTTPD Importer Affected by VCID-kcwg-hswv-2uf7 https://httpd.apache.org/security/json/CVE-2005-3352.json 38.0.0
2026-04-01T12:36:12.982781+00:00 Apache HTTPD Importer Affected by VCID-zn9e-rcpj-yuax https://httpd.apache.org/security/json/CVE-2004-0940.json 38.0.0
2026-04-01T12:36:12.529350+00:00 Apache HTTPD Importer Affected by VCID-e2sp-bna5-mqb6 https://httpd.apache.org/security/json/CVE-2003-0993.json 38.0.0
2026-04-01T12:36:12.486138+00:00 Apache HTTPD Importer Affected by VCID-ug4a-zxkg-cbew https://httpd.apache.org/security/json/CVE-2003-0987.json 38.0.0
2026-04-01T12:36:12.316662+00:00 Apache HTTPD Importer Affected by VCID-yjqs-kszf-yka1 https://httpd.apache.org/security/json/CVE-2003-0542.json 38.0.0
2026-04-01T12:36:12.018086+00:00 Apache HTTPD Importer Affected by VCID-a86d-f4nd-eqhh https://httpd.apache.org/security/json/CVE-2003-0083.json 38.0.0
2026-04-01T12:36:11.908017+00:00 Apache HTTPD Importer Affected by VCID-3m9y-maes-5ycp https://httpd.apache.org/security/json/CVE-2003-0020.json 38.0.0
2026-04-01T12:36:11.776219+00:00 Apache HTTPD Importer Affected by VCID-sn3y-mpbk-hqe8 https://httpd.apache.org/security/json/CVE-2002-0843.json 38.0.0
2026-04-01T12:36:11.686302+00:00 Apache HTTPD Importer Affected by VCID-nkgw-gs9g-ckft https://httpd.apache.org/security/json/CVE-2002-0840.json 38.0.0
2026-04-01T12:36:11.640282+00:00 Apache HTTPD Importer Affected by VCID-bu8e-hpcy-jqda https://httpd.apache.org/security/json/CVE-2002-0839.json 38.0.0
2026-04-01T12:36:11.525134+00:00 Apache HTTPD Importer Affected by VCID-d5w4-vnbd-afdj https://httpd.apache.org/security/json/CVE-2002-0392.json 38.0.0
2026-04-01T12:36:11.412143+00:00 Apache HTTPD Importer Affected by VCID-sgfs-58ym-fygd https://httpd.apache.org/security/json/CVE-2001-0730.json 38.0.0
2026-04-01T12:36:11.353533+00:00 Apache HTTPD Importer Affected by VCID-vj4e-mzff-9qfw https://httpd.apache.org/security/json/CVE-2000-1205.json 38.0.0
2026-04-01T12:36:11.282345+00:00 Apache HTTPD Importer Affected by VCID-292q-gt7d-57h4 https://httpd.apache.org/security/json/CVE-1999-1199.json 38.0.0