Search for packages
| purl | pkg:apache/httpd@1.3.27 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2003-0020
|
Apache does not filter terminal escape sequences from error logs, which could make it easier for attackers to insert those … |
Vulnerable Vulnerable |
|
CVE-2003-0460
|
The rotatelogs support program on Win32 and OS/2 would quit logging and exit if it received special control characters such … |
Vulnerable |
|
CVE-2003-0542
|
By using a regular expression with more than 9 captures a buffer overflow can occur in mod_alias or mod_rewrite. To … |
Vulnerable Vulnerable |
|
CVE-2003-0987
|
mod_digest does not properly verify the nonce of a client response by using a AuthNonce secret. This could allow a … |
Vulnerable |
|
CVE-2003-0993
|
A bug in the parsing of Allow/Deny rules using IP addresses without a netmask on big-endian 64-bit platforms causes the … |
Vulnerable |
|
CVE-2004-0492
|
A buffer overflow was found in the Apache proxy module, mod_proxy, which can be triggered by receiving an invalid Content-Length … |
Vulnerable |
|
CVE-2004-0940
|
A buffer overflow in mod_include could allow a local user who is authorised to create server side include (SSI) files … |
Vulnerable |
|
CVE-2005-3352
|
A flaw in mod_imap when using the Referer directive with image maps. In certain site configurations a remote attacker could … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2006-3918
|
A flaw in the handling of invalid Expect headers. If an attacker can influence the Expect header that a victim … |
Vulnerable |
|
CVE-2006-5752
|
A flaw was found in the mod_status module. On sites where the server-status page is publicly accessible and ExtendedStatus is … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2007-3304
|
The Apache HTTP server did not verify that a process was an Apache child process before sending it signals. A … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2007-5000
|
A flaw was found in the mod_imagemap module. On sites where mod_imagemap is enabled and an imagemap file is publicly … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2007-6388
|
A flaw was found in the mod_status module. On sites where mod_status is enabled and the status pages were publicly … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2010-0010
|
An incorrect conversion between numeric types flaw was found in the mod_proxy module which affects some 64-bit architecture systems. A … |
Vulnerable |
|
CVE-2011-3368
|
An exposure was found when using mod_proxy in reverse proxy mode. In certain configurations using RewriteRule with proxy flag or … |
Not vulnerable Vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2002-0839
|
The permissions of the shared memory used for the scoreboard allows an attacker who can execute under the Apache UID … | |
|
CVE-2002-0840
|
Cross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when … | |
|
CVE-2002-0843
|
Buffer overflows in the benchmarking utility ab could be exploited if ab is run against a malicious server |