Advisory details:
apache_httpd / CVE-2006-3747
| Advisory ID | apache_httpd/CVE-2006-3747 |
| Aliases | |
| Summary | An off-by-one flaw exists in the Rewrite module, mod_rewrite. Depending on the manner in which Apache httpd was compiled, this software defect may result in a vulnerability which, in combination with certain types of Rewrite rules in the web server configuration files, could be triggered remotely. For vulnerable builds, the nature of the vulnerability can be denial of service (crashing of web server processes) or potentially allow arbitrary code execution. |
| Status | Published |
| Exploitability | 2.0 |
| Weighted Severity | 0.0 |
| Risk | |
| Affected and Fixed Packages | Package Details |
| Introduced and Fixed Package Commit Patches | Package Commit Patches Details |
| There are no known CWE. |
| System | Score | Found at |
|---|---|---|
| apache_httpd | important |
| Reference id | Reference type | URL |
|---|---|---|
| CVE-2006-3747 | https://httpd.apache.org/security/json/CVE-2006-3747.json |
| Data source | Exploit-DB |
|---|---|
| Date added | Aug. 20, 2006 |
| Description | Apache < 1.3.37/2.0.59/2.2.3 mod_rewrite - Remote Overflow |
| Ransomware campaign use | Known |
| Source publication date | Aug. 21, 2006 |
| Exploit type | remote |
| Platform | multiple |
| Source update date | Oct. 27, 2016 |
| Data source | Metasploit |
|---|---|
| Description | This module exploits the mod_rewrite LDAP protocol scheme handling flaw discovered by Mark Dowd, which produces an off-by-one overflow. Apache versions 1.3.29-36, 2.0.47-58, and 2.2.1-2 are vulnerable. This module requires REWRITEPATH to be set accurately. In addition, the target must have 'RewriteEngine on' configured, with a specific 'RewriteRule' condition enabled to allow for exploitation. The flaw affects multiple platforms, however this module currently only supports Windows based installations. |
| Note | Reliability: - unknown-reliability Stability: - unknown-stability SideEffects: - unknown-side-effects |
| Ransomware campaign use | Unknown |
| Source publication date | July 28, 2006 |
| Platform | Windows |
| Source URL | https://github.com/rapid7/metasploit-framework/tree/master/modules/exploits/windows/http/apache_mod_rewrite_ldap.rb |
No EPSS data available for this advisory.
| Patch URL | |
|---|---|
| There are no known patches. | |
There are no SSVC decisions available.