Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:apache/httpd@1.3.17
purl pkg:apache/httpd@1.3.17
Next non-vulnerable version 2.0.65
Latest non-vulnerable version 2.4.54
Risk score
Vulnerabilities affecting this package (20)
Advisory Summary Fixed in package version
CVE-2001-0730

A vulnerability was found in the split-logfile support program. A request with a specially crafted Host: header could allow any …
1.3.22
Vulnerable
CVE-2001-0925

The default installation can lead mod_negotiation and mod_dir or mod_autoindex to display a directory listing instead of the multiview index.html …
1.3.19
Vulnerable
CVE-2002-0392

Malicious requests can cause various effects ranging from a relatively harmless increase in system resources through to denial of service …
1.3.26
Vulnerable
2.0.37
Vulnerable
CVE-2002-0839

The permissions of the shared memory used for the scoreboard allows an attacker who can execute under the Apache UID …
1.3.27
Vulnerable
CVE-2002-0840

Cross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when …
1.3.27
Vulnerable
2.0.43
Vulnerable
CVE-2002-0843

Buffer overflows in the benchmarking utility ab could be exploited if ab is run against a malicious server
1.3.27
Vulnerable
CVE-2003-0020

Apache does not filter terminal escape sequences from error logs, which could make it easier for attackers to insert those …
1.3.31
Vulnerable
2.0.49
Vulnerable
CVE-2003-0083

Apache did not filter terminal escape sequences from its access logs, which could make it easier for attackers to insert …
1.3.26
Vulnerable
2.0.46
Vulnerable
CVE-2003-0542

By using a regular expression with more than 9 captures a buffer overflow can occur in mod_alias or mod_rewrite. To …
1.3.29
Vulnerable
2.0.48
Vulnerable
CVE-2003-0987

mod_digest does not properly verify the nonce of a client response by using a AuthNonce secret. This could allow a …
1.3.31
Vulnerable
CVE-2003-0993

A bug in the parsing of Allow/Deny rules using IP addresses without a netmask on big-endian 64-bit platforms causes the …
1.3.31
Vulnerable
CVE-2004-0940

A buffer overflow in mod_include could allow a local user who is authorised to create server side include (SSI) files …
1.3.33
Vulnerable
CVE-2005-3352

A flaw in mod_imap when using the Referer directive with image maps. In certain site configurations a remote attacker could …
1.3.35
Vulnerable
2.0.58
Vulnerable
2.2.2
Vulnerable
CVE-2006-3918

A flaw in the handling of invalid Expect headers. If an attacker can influence the Expect header that a victim …
1.3.35
Vulnerable
CVE-2006-5752

A flaw was found in the mod_status module. On sites where the server-status page is publicly accessible and ExtendedStatus is …
1.3.39
Vulnerable
2.0.61
Vulnerable
2.2.6
Vulnerable
CVE-2007-3304

The Apache HTTP server did not verify that a process was an Apache child process before sending it signals. A …
1.3.39
Vulnerable
2.0.61
Vulnerable
2.2.6
Vulnerable
CVE-2007-5000

A flaw was found in the mod_imagemap module. On sites where mod_imagemap is enabled and an imagemap file is publicly …
1.3.41
Vulnerable
2.0.63
Vulnerable
2.2.8
Vulnerable
CVE-2007-6388

A flaw was found in the mod_status module. On sites where mod_status is enabled and the status pages were publicly …
1.3.41
Vulnerable
2.0.63
Vulnerable
2.2.8
Vulnerable
CVE-2010-0010

An incorrect conversion between numeric types flaw was found in the mod_proxy module which affects some 64-bit architecture systems. A …
1.3.42
Vulnerable
CVE-2011-3368

An exposure was found when using mod_proxy in reverse proxy mode. In certain configurations using RewriteRule with proxy flag or …
2.0.65
Not vulnerable
2.2.22
Vulnerable
This package is not known to fix any advisories.