Search for packages
| purl | pkg:apache/httpd@2.0.61 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2007-5000
|
A flaw was found in the mod_imagemap module. On sites where mod_imagemap is enabled and an imagemap file is publicly … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2007-6388
|
A flaw was found in the mod_status module. On sites where mod_status is enabled and the status pages were publicly … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2008-0005
|
A workaround was added in the mod_proxy_ftp module. On sites where mod_proxy_ftp is enabled and a forward proxy is configured, … |
Vulnerable Vulnerable |
|
CVE-2008-2364
|
A flaw was found in the handling of excessive interim responses from an origin server when using mod_proxy_http. A remote … |
Vulnerable Vulnerable |
|
CVE-2008-2939
|
A flaw was found in the handling of wildcards in the path of a FTP URL with mod_proxy_ftp. If mod_proxy_ftp … |
Vulnerable Vulnerable |
|
CVE-2009-1891
|
A denial of service flaw was found in the mod_deflate module. This module continued to compress large files until compression … |
Vulnerable Vulnerable |
|
CVE-2009-2412
|
A flaw in apr_palloc() in the bundled copy of APR could cause heap overflows in programs that try to apr_palloc() … |
Vulnerable Vulnerable |
|
CVE-2009-3094
|
A NULL pointer dereference flaw was found in the mod_proxy_ftp module. A malicious FTP server to which requests are being … |
Vulnerable Vulnerable |
|
CVE-2009-3095
|
A flaw was found in the mod_proxy_ftp module. In a reverse proxy configuration, a remote attacker could use this flaw … |
Vulnerable Vulnerable |
|
CVE-2009-3560
|
A buffer over-read flaw was found in the bundled expat library. An attacker who is able to get Apache to … |
Vulnerable Vulnerable |
|
CVE-2009-3720
|
A buffer over-read flaw was found in the bundled expat library. An attacker who is able to get Apache to … |
Vulnerable Vulnerable |
|
CVE-2010-0425
|
A flaw was found with within mod_isapi which would attempt to unload the ISAPI dll when it encountered various error … |
Vulnerable Vulnerable |
|
CVE-2010-0434
|
A flaw in the core subrequest process code was fixed, to always provide a shallow copy of the headers_in array … |
Vulnerable Vulnerable |
|
CVE-2010-1452
|
A flaw was found in the handling of requests by mod_cache (2.2) and mod_dav (2.0 and 2.2). A malicious remote … |
Vulnerable Vulnerable |
|
CVE-2010-1623
|
A flaw was found in the apr_brigade_split_line() function of the bundled APR-util library, used to process non-SSL requests. A remote … |
Vulnerable Vulnerable |
|
CVE-2011-0419
|
A flaw was found in the apr_fnmatch() function of the bundled APR library. Where mod_autoindex is enabled, and a directory … |
Not vulnerable Vulnerable |
|
CVE-2011-3192
|
A flaw was found in the way the Apache HTTP Server handled Range HTTP headers. A remote attacker could use … |
Not vulnerable Vulnerable |
|
CVE-2011-3368
|
An exposure was found when using mod_proxy in reverse proxy mode. In certain configurations using RewriteRule with proxy flag or … |
Not vulnerable Vulnerable |
|
CVE-2011-3607
|
An integer overflow flaw was found which, when the mod_setenvif module is enabled, could allow local users to gain privileges … |
Not vulnerable Vulnerable |
|
CVE-2012-0031
|
A flaw was found in the handling of the scoreboard. An unprivileged child process could cause the parent process to … |
Not vulnerable Vulnerable |
|
CVE-2012-0053
|
A flaw was found in the default error response for status code 400. This flaw could be used by an … |
Not vulnerable Vulnerable |
|
CVE-2013-1862
|
mod_rewrite does not filter terminal escape sequences from logs, which could make it easier for attackers to insert those sequences … |
Not vulnerable Vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2006-5752
|
A flaw was found in the mod_status module. On sites where the server-status page is publicly accessible and ExtendedStatus is … | |
|
CVE-2007-1863
|
A bug was found in the mod_cache module. On sites where caching is enabled, a remote attacker could send a … | |
|
CVE-2007-3304
|
The Apache HTTP server did not verify that a process was an Apache child process before sending it signals. A … | |
|
CVE-2007-3847
|
A flaw was found in the Apache HTTP Server mod_proxy module. On sites where a reverse proxy is configured, a … |