VulnerableCode Package Details - pkg:apache/httpd@2.0.36

Vulnerabilities affecting this package (53)

Advisory	Summary	Fixed in package version
CVE-2002-0392	Malicious requests can cause various effects ranging from a relatively harmless increase in system resources through to denial of service …	1.3.26 Vulnerable 2.0.37 Vulnerable
CVE-2002-0661	Certain URIs would bypass security and allow users to invoke or access any file depending on the system configuration. Affects …	2.0.40 Vulnerable
CVE-2002-0840	Cross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when …	1.3.27 Vulnerable 2.0.43 Vulnerable
CVE-2002-1593	A flaw was found in handling of versioning hooks in mod_dav. An attacker could send a carefully crafted request in …	2.0.42 Vulnerable
CVE-2003-0020	Apache does not filter terminal escape sequences from error logs, which could make it easier for attackers to insert those …	1.3.31 Vulnerable 2.0.49 Vulnerable
CVE-2003-0083	Apache did not filter terminal escape sequences from its access logs, which could make it easier for attackers to insert …	1.3.26 Vulnerable 2.0.46 Vulnerable
CVE-2003-0132	Apache 2.0 versions before Apache 2.0.45 had a significant Denial of Service vulnerability. Remote attackers could cause a denial of …	2.0.45 Vulnerable
CVE-2003-0192	A bug in the optional renegotiation code in mod_ssl included with Apache httpd can cause cipher suite restrictions to be …	2.0.47 Vulnerable
CVE-2003-0253	In a server with multiple listening sockets a certain error returned by accept() on a rarely access port can cause …	2.0.47 Vulnerable
CVE-2003-0254	When a client requests that proxy ftp connect to a ftp server with IPv6 address, and the proxy is unable …	2.0.47 Vulnerable
CVE-2003-0542	By using a regular expression with more than 9 captures a buffer overflow can occur in mod_alias or mod_rewrite. To …	1.3.29 Vulnerable 2.0.48 Vulnerable
CVE-2003-0789	A bug in mod_cgid mishandling of CGI redirect paths can result in CGI output going to the wrong client when …	2.0.48 Vulnerable
CVE-2004-0113	A memory leak in mod_ssl allows a remote denial of service attack against an SSL-enabled server by sending plain HTTP …	2.0.49 Vulnerable
CVE-2004-0174	A starvation issue on listening sockets occurs when a short-lived connection on a rarely-accessed listening socket will cause a child …	1.3.31 Vulnerable 2.0.49 Vulnerable
CVE-2004-0488	A buffer overflow in the mod_ssl FakeBasicAuth code could be exploited by an attacker using a (trusted) client certificate with …	2.0.50 Vulnerable
CVE-2004-0747	A buffer overflow was found in the expansion of environment variables during configuration file parsing. This issue could allow a …	2.0.51 Vulnerable
CVE-2004-0786	Testing using the Codenomicon HTTP Test Tool performed by the Apache Software Foundation security group and Red Hat uncovered an …	2.0.51 Vulnerable
CVE-2004-0809	An issue was discovered in the mod_dav module which could be triggered for a location where WebDAV authoring access has …	2.0.51 Vulnerable
CVE-2004-0885	An issue has been discovered in the mod_ssl module when configured to use the "SSLCipherSuite" directive in directory or location …	2.0.53 Vulnerable
CVE-2004-0942	An issue was discovered where the field length limit was not enforced for certain malicious requests. This could allow a …	2.0.53 Vulnerable
CVE-2004-1834	The experimental mod_disk_cache module stored client authentication credentials for cached objects such as proxy authentication credentials and Basic Authentication passwords …	2.0.53 Vulnerable
CVE-2005-1268	An off-by-one stack overflow was discovered in the mod_ssl CRL verification callback. In order to exploit this issue the Apache …	2.0.55 Vulnerable
CVE-2005-2088	A flaw occured when using the Apache server as a HTTP proxy. A remote attacker could send a HTTP request …	2.0.55 Vulnerable
CVE-2005-2491	An integer overflow flaw was found in PCRE, a Perl-compatible regular expression library included within httpd. A local user who …	2.0.55 Vulnerable
CVE-2005-2700	A flaw in the mod_ssl handling of the "SSLVerifyClient" directive. This flaw would occur if a virtual host has been …	2.0.55 Vulnerable
CVE-2005-2728	A flaw in the byterange filter would cause some responses to be buffered into memory. If a server has a …	2.0.55 Vulnerable
CVE-2005-2970	A memory leak in the worker MPM would allow remote attackers to cause a denial of service (memory consumption) via …	2.0.55 Vulnerable
CVE-2005-3352	A flaw in mod_imap when using the Referer directive with image maps. In certain site configurations a remote attacker could …	1.3.35 Vulnerable 2.0.58 Vulnerable 2.2.2 Vulnerable
CVE-2005-3357	A NULL pointer dereference flaw in mod_ssl was discovered affecting server configurations where an SSL virtual host is configured with …	2.0.58 Vulnerable 2.2.2 Vulnerable
CVE-2006-5752	A flaw was found in the mod_status module. On sites where the server-status page is publicly accessible and ExtendedStatus is …	1.3.39 Vulnerable 2.0.61 Vulnerable 2.2.6 Vulnerable
CVE-2007-3304	The Apache HTTP server did not verify that a process was an Apache child process before sending it signals. A …	1.3.39 Vulnerable 2.0.61 Vulnerable 2.2.6 Vulnerable
CVE-2007-3847	A flaw was found in the Apache HTTP Server mod_proxy module. On sites where a reverse proxy is configured, a …	2.0.61 Vulnerable 2.2.6 Vulnerable
CVE-2007-5000	A flaw was found in the mod_imagemap module. On sites where mod_imagemap is enabled and an imagemap file is publicly …	1.3.41 Vulnerable 2.0.63 Vulnerable 2.2.8 Vulnerable
CVE-2007-6388	A flaw was found in the mod_status module. On sites where mod_status is enabled and the status pages were publicly …	1.3.41 Vulnerable 2.0.63 Vulnerable 2.2.8 Vulnerable
CVE-2008-0005	A workaround was added in the mod_proxy_ftp module. On sites where mod_proxy_ftp is enabled and a forward proxy is configured, …	2.0.63 Vulnerable 2.2.8 Vulnerable
CVE-2008-2364	A flaw was found in the handling of excessive interim responses from an origin server when using mod_proxy_http. A remote …	2.2.9 Vulnerable 2.0.64 Vulnerable
CVE-2008-2939	A flaw was found in the handling of wildcards in the path of a FTP URL with mod_proxy_ftp. If mod_proxy_ftp …	2.2.10 Vulnerable 2.0.64 Vulnerable
CVE-2009-1891	A denial of service flaw was found in the mod_deflate module. This module continued to compress large files until compression …	2.2.12 Vulnerable 2.0.64 Vulnerable
CVE-2009-2412	A flaw in apr_palloc() in the bundled copy of APR could cause heap overflows in programs that try to apr_palloc() …	2.0.64 Vulnerable 2.2.13 Vulnerable
CVE-2009-3094	A NULL pointer dereference flaw was found in the mod_proxy_ftp module. A malicious FTP server to which requests are being …	2.0.64 Vulnerable 2.2.14 Vulnerable
CVE-2009-3095	A flaw was found in the mod_proxy_ftp module. In a reverse proxy configuration, a remote attacker could use this flaw …	2.0.64 Vulnerable 2.2.14 Vulnerable
CVE-2009-3560	A buffer over-read flaw was found in the bundled expat library. An attacker who is able to get Apache to …	2.0.64 Vulnerable 2.2.17 Vulnerable
CVE-2009-3720	A buffer over-read flaw was found in the bundled expat library. An attacker who is able to get Apache to …	2.0.64 Vulnerable 2.2.17 Vulnerable
CVE-2010-0434	A flaw in the core subrequest process code was fixed, to always provide a shallow copy of the headers_in array …	2.0.64 Vulnerable 2.2.15 Vulnerable
CVE-2010-1452	A flaw was found in the handling of requests by mod_cache (2.2) and mod_dav (2.0 and 2.2). A malicious remote …	2.0.64 Vulnerable 2.2.16 Vulnerable
CVE-2010-1623	A flaw was found in the apr_brigade_split_line() function of the bundled APR-util library, used to process non-SSL requests. A remote …	2.0.64 Vulnerable 2.2.17 Vulnerable
CVE-2011-0419	A flaw was found in the apr_fnmatch() function of the bundled APR library. Where mod_autoindex is enabled, and a directory …	2.0.65 Not vulnerable 2.2.19 Vulnerable
CVE-2011-3192	A flaw was found in the way the Apache HTTP Server handled Range HTTP headers. A remote attacker could use …	2.0.65 Not vulnerable 2.2.20 Vulnerable
CVE-2011-3368	An exposure was found when using mod_proxy in reverse proxy mode. In certain configurations using RewriteRule with proxy flag or …	2.0.65 Not vulnerable 2.2.22 Vulnerable
CVE-2011-3607	An integer overflow flaw was found which, when the mod_setenvif module is enabled, could allow local users to gain privileges …	2.0.65 Not vulnerable 2.2.22 Vulnerable
CVE-2012-0031	A flaw was found in the handling of the scoreboard. An unprivileged child process could cause the parent process to …	2.0.65 Not vulnerable 2.2.22 Vulnerable
CVE-2012-0053	A flaw was found in the default error response for status code 400. This flaw could be used by an …	2.0.65 Not vulnerable 2.2.22 Vulnerable
CVE-2013-1862	mod_rewrite does not filter terminal escape sequences from logs, which could make it easier for attackers to insert those sequences …	2.0.65 Not vulnerable 2.2.25 Vulnerable

Next non-vulnerable version	2.0.65
Latest non-vulnerable version	2.4.54
Risk score