VulnerableCode Package Details - pkg:apache/httpd@2.0.51

Vulnerabilities affecting this package (39)

Advisory	Summary	Fixed in package version
CVE-2004-0811	A flaw in Apache 2.0.51 (only) broke the merging of the Satisfy directive which could result in access being granted …	2.0.52 Vulnerable
CVE-2004-0885	An issue has been discovered in the mod_ssl module when configured to use the "SSLCipherSuite" directive in directory or location …	2.0.53 Vulnerable
CVE-2004-0942	An issue was discovered where the field length limit was not enforced for certain malicious requests. This could allow a …	2.0.53 Vulnerable
CVE-2004-1834	The experimental mod_disk_cache module stored client authentication credentials for cached objects such as proxy authentication credentials and Basic Authentication passwords …	2.0.53 Vulnerable
CVE-2005-1268	An off-by-one stack overflow was discovered in the mod_ssl CRL verification callback. In order to exploit this issue the Apache …	2.0.55 Vulnerable
CVE-2005-2088	A flaw occured when using the Apache server as a HTTP proxy. A remote attacker could send a HTTP request …	2.0.55 Vulnerable
CVE-2005-2491	An integer overflow flaw was found in PCRE, a Perl-compatible regular expression library included within httpd. A local user who …	2.0.55 Vulnerable
CVE-2005-2700	A flaw in the mod_ssl handling of the "SSLVerifyClient" directive. This flaw would occur if a virtual host has been …	2.0.55 Vulnerable
CVE-2005-2728	A flaw in the byterange filter would cause some responses to be buffered into memory. If a server has a …	2.0.55 Vulnerable
CVE-2005-2970	A memory leak in the worker MPM would allow remote attackers to cause a denial of service (memory consumption) via …	2.0.55 Vulnerable
CVE-2005-3352	A flaw in mod_imap when using the Referer directive with image maps. In certain site configurations a remote attacker could …	1.3.35 Vulnerable 2.0.58 Vulnerable 2.2.2 Vulnerable
CVE-2005-3357	A NULL pointer dereference flaw in mod_ssl was discovered affecting server configurations where an SSL virtual host is configured with …	2.0.58 Vulnerable 2.2.2 Vulnerable
CVE-2006-3747	An off-by-one flaw exists in the Rewrite module, mod_rewrite. Depending on the manner in which Apache httpd was compiled, this …	1.3.37 Vulnerable 2.0.59 Vulnerable 2.2.3 Vulnerable
CVE-2006-5752	A flaw was found in the mod_status module. On sites where the server-status page is publicly accessible and ExtendedStatus is …	1.3.39 Vulnerable 2.0.61 Vulnerable 2.2.6 Vulnerable
CVE-2007-1863	A bug was found in the mod_cache module. On sites where caching is enabled, a remote attacker could send a …	2.0.61 Vulnerable 2.2.6 Vulnerable
CVE-2007-3304	The Apache HTTP server did not verify that a process was an Apache child process before sending it signals. A …	1.3.39 Vulnerable 2.0.61 Vulnerable 2.2.6 Vulnerable
CVE-2007-3847	A flaw was found in the Apache HTTP Server mod_proxy module. On sites where a reverse proxy is configured, a …	2.0.61 Vulnerable 2.2.6 Vulnerable
CVE-2007-5000	A flaw was found in the mod_imagemap module. On sites where mod_imagemap is enabled and an imagemap file is publicly …	1.3.41 Vulnerable 2.0.63 Vulnerable 2.2.8 Vulnerable
CVE-2007-6388	A flaw was found in the mod_status module. On sites where mod_status is enabled and the status pages were publicly …	1.3.41 Vulnerable 2.0.63 Vulnerable 2.2.8 Vulnerable
CVE-2008-0005	A workaround was added in the mod_proxy_ftp module. On sites where mod_proxy_ftp is enabled and a forward proxy is configured, …	2.0.63 Vulnerable 2.2.8 Vulnerable
CVE-2008-2364	A flaw was found in the handling of excessive interim responses from an origin server when using mod_proxy_http. A remote …	2.2.9 Vulnerable 2.0.64 Vulnerable
CVE-2008-2939	A flaw was found in the handling of wildcards in the path of a FTP URL with mod_proxy_ftp. If mod_proxy_ftp …	2.2.10 Vulnerable 2.0.64 Vulnerable
CVE-2009-1891	A denial of service flaw was found in the mod_deflate module. This module continued to compress large files until compression …	2.2.12 Vulnerable 2.0.64 Vulnerable
CVE-2009-2412	A flaw in apr_palloc() in the bundled copy of APR could cause heap overflows in programs that try to apr_palloc() …	2.0.64 Vulnerable 2.2.13 Vulnerable
CVE-2009-3094	A NULL pointer dereference flaw was found in the mod_proxy_ftp module. A malicious FTP server to which requests are being …	2.0.64 Vulnerable 2.2.14 Vulnerable
CVE-2009-3095	A flaw was found in the mod_proxy_ftp module. In a reverse proxy configuration, a remote attacker could use this flaw …	2.0.64 Vulnerable 2.2.14 Vulnerable
CVE-2009-3560	A buffer over-read flaw was found in the bundled expat library. An attacker who is able to get Apache to …	2.0.64 Vulnerable 2.2.17 Vulnerable
CVE-2009-3720	A buffer over-read flaw was found in the bundled expat library. An attacker who is able to get Apache to …	2.0.64 Vulnerable 2.2.17 Vulnerable
CVE-2010-0425	A flaw was found with within mod_isapi which would attempt to unload the ISAPI dll when it encountered various error …	2.0.64 Vulnerable 2.2.15 Vulnerable
CVE-2010-0434	A flaw in the core subrequest process code was fixed, to always provide a shallow copy of the headers_in array …	2.0.64 Vulnerable 2.2.15 Vulnerable
CVE-2010-1452	A flaw was found in the handling of requests by mod_cache (2.2) and mod_dav (2.0 and 2.2). A malicious remote …	2.0.64 Vulnerable 2.2.16 Vulnerable
CVE-2010-1623	A flaw was found in the apr_brigade_split_line() function of the bundled APR-util library, used to process non-SSL requests. A remote …	2.0.64 Vulnerable 2.2.17 Vulnerable
CVE-2011-0419	A flaw was found in the apr_fnmatch() function of the bundled APR library. Where mod_autoindex is enabled, and a directory …	2.0.65 Not vulnerable 2.2.19 Vulnerable
CVE-2011-3192	A flaw was found in the way the Apache HTTP Server handled Range HTTP headers. A remote attacker could use …	2.0.65 Not vulnerable 2.2.20 Vulnerable
CVE-2011-3368	An exposure was found when using mod_proxy in reverse proxy mode. In certain configurations using RewriteRule with proxy flag or …	2.0.65 Not vulnerable 2.2.22 Vulnerable
CVE-2011-3607	An integer overflow flaw was found which, when the mod_setenvif module is enabled, could allow local users to gain privileges …	2.0.65 Not vulnerable 2.2.22 Vulnerable
CVE-2012-0031	A flaw was found in the handling of the scoreboard. An unprivileged child process could cause the parent process to …	2.0.65 Not vulnerable 2.2.22 Vulnerable
CVE-2012-0053	A flaw was found in the default error response for status code 400. This flaw could be used by an …	2.0.65 Not vulnerable 2.2.22 Vulnerable
CVE-2013-1862	mod_rewrite does not filter terminal escape sequences from logs, which could make it easier for attackers to insert those sequences …	2.0.65 Not vulnerable 2.2.25 Vulnerable

Next non-vulnerable version	2.0.65
Latest non-vulnerable version	2.4.54
Risk score

Advisory	Summary	Aliases
CVE-2004-0747	A buffer overflow was found in the expansion of environment variables during configuration file parsing. This issue could allow a …
CVE-2004-0748	An issue was discovered in the mod_ssl module in Apache 2.0. A remote attacker who forces an SSL connection to …
CVE-2004-0751	An issue was discovered in the mod_ssl module in Apache 2.0.44-2.0.50 which could be triggered if the server is configured …
CVE-2004-0786	Testing using the Codenomicon HTTP Test Tool performed by the Apache Software Foundation security group and Red Hat uncovered an …
CVE-2004-0809	An issue was discovered in the mod_dav module which could be triggered for a location where WebDAV authoring access has …