Hallo, dies ist ein Test.

PWD: /www/data-lst1/unixsoft/unixsoft/kaempfer/.public_html

Running in File Mode
Relative path: ./../../../../../server/data/WWW/docs/2.2/vulnerabilities_13.html
Real path: /www/server/data/WWW/manual.neu/vulnerabilities_13.html
Zurück

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
 <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
 <link href="/css/apsite.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
 <meta name="author" content="Documentation Group" /><meta name="email" content="docs@httpd.apache.org" />
 <title>httpd 1.3 vulnerabilities - The Apache HTTP Server Project</title>
 </head>
 <body>
 
 <div id="page-header">
 &nbsp;
 &nbsp;
 <a href="/">
 <img alt="" width="800" height="72" src="/images/httpd_logo_wide_new.png" />
 </a>
 </div>

<div id="apmenu">
 
 <h1 id="essentials">Essentials</h1>
<ul>
<li><a href="/ABOUT_APACHE.html">About</a></li>
<li><a href="http://www.apache.org/licenses/">License</a></li>
<li><a href="http://wiki.apache.org/httpd/FAQ">FAQ</a></li>
<li><a href="/security_report.html">Security Reports</a></li>
</ul>
<h1 id="downloading">Download!</h1>
<ul>
<li><a href="/download.cgi">From a Mirror</a></li>
</ul>
<h1 id="documentation"><a href="/docs/">Documentation</a></h1>
<ul>
<li><a href="/docs/2.4/">Version 2.4</a></li>
<li><a href="/docs/2.2/">Version 2.2</a></li>
<li><a href="/docs/2.0/">Version 2.0</a></li>
<li><a href="/docs/trunk/">Trunk (dev)</a></li>
<li><a href="http://wiki.apache.org/httpd/">Wiki</a></li>
</ul>
<h1 id="get-support">Get Support</h1>
<ul>
<li><a href="/support.html">Support</a></li>
</ul>
<h1 id="get-involved">Get Involved</h1>
<ul>
<li><a href="/lists.html">Mailing Lists</a></li>
<li><a href="/bug_report.html">Bug Reports</a></li>
<li><a href="/dev/">Developer Info</a></li>
</ul>
<h1 id="subprojects">Subprojects</h1>
<ul>
<li><a href="/docs-project/">Docs</a></li>
<li><a href="/test/">Test</a></li>
<li><a href="/test/flood/">Flood</a></li>
<li><a href="/apreq/">libapreq</a></li>
<li><a href="/modules">Modules</a></li>
<li><a href="/mod_fcgid/">mod_fcgid</a></li>
<li><a href="/mod_ftp/">mod_ftp</a></li>
</ul>
<h1 id="miscellaneous"><a href="/info/">Miscellaneous</a></h1>
<ul>
<li><a href="/contributors/">Contributors</a></li>
<li><a href="http://www.apache.org/foundation/thanks.html">Sponsors</a></li>
<li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
</ul>
 
 </div>

<div id="apcontents">
 <h1 id="top">Apache httpd 1.3 vulnerabilities</h1>This page lists all security vulnerabilities fixed in released
versions of Apache httpd 1.3. Each
vulnerability is given a security <a href="/security/impact_levels.html">impact rating</a> by the Apache
security team - please note that this rating may well vary from
platform to platform. We also list the versions of Apache httpd the
flaw is known to affect, and where a flaw has not been verified list
the version with a question mark. Please note that if a vulnerability is shown below as being fixed
in a "-dev" release then this means that a fix has been applied to
the development source tree and will be part of an upcoming full release. This page is created from a database of vulnerabilities originally
populated by Apache Week. Please send comments or corrections for
these vulnerabilities to the <a href="/security_report.html">Security
Team</a>. <h1 id="1.3-never">
Not fixed in Apache httpd 1.3</h1><dl>
 <dd>
 moderate: 
 
 <name name="CVE-2011-3368">mod_proxy reverse proxy exposure</name>
 
 <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3368">CVE-2011-3368</a>
 
An exposure was found when using mod_proxy in reverse proxy mode.
In certain configurations using RewriteRule with proxy flag,
a remote attacker could cause the reverse proxy to
connect to an arbitrary server, possibly disclosing sensitive
information from internal web servers not directly accessible to
attacker.
 No update of 1.3 will be released. Patches will be published to
<a href="http://archive.apache.org/dist/httpd/patches/apply_to_1.3.42/">http://archive.apache.org/dist/httpd/patches/apply_to_1.3.42/</a>
 </dd>
 <dd>
 Acknowledgements: 
This issue was reported by Context Information Security Ltd

 </dd>
 <dd>
 Reported to security team: 16th September 2011 
 Issue public: 5th October 2011 </dd>
 <dd/>
 <dd>
 Affects: 
 1.3.42, 1.3.41, 1.3.39, 1.3.37, 1.3.36, 1.3.35, 1.3.34, 1.3.33, 1.3.32, 1.3.31, 1.3.29, 1.3.28, 1.3.27, 1.3.26, 1.3.24, 1.3.22, 1.3.20, 1.3.19, 1.3.17, 1.3.14, 1.3.12, 1.3.11, 1.3.9, 1.3.6, 1.3.4, 1.3.3, 1.3.2</dd>
</dl><h1 id="1.3.42">
Fixed in Apache httpd 1.3.42</h1><dl>
 <dd>
 moderate: 
 
 <name name="CVE-2010-0010">mod_proxy overflow on 64-bit systems</name>
 
 <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0010">CVE-2010-0010</a>
 
An incorrect conversion between numeric types flaw was found in the
mod_proxy module which affects some 64-bit architecture systems. A
malicious HTTP server to which requests are being proxied could use
this flaw to trigger a heap buffer overflow in an httpd child process
via a carefully crafted response.

 </dd>
 <dd>
 Reported to security team: 30th December 2009 
 Issue public: 27th January 2010 </dd>
 <dd>
 Update Released: 3rd February 2010 </dd>
 <dd>
 Affects: 
 1.3.41, 1.3.39, 1.3.37, 1.3.36, 1.3.35, 1.3.34, 1.3.33, 1.3.32, 1.3.31, 1.3.29, 1.3.28, 1.3.27, 1.3.26, 1.3.24, 1.3.22, 1.3.20, 1.3.19, 1.3.17, 1.3.14, 1.3.12, 1.3.11, 1.3.9, 1.3.6, 1.3.4, 1.3.3, 1.3.2</dd>
</dl><h1 id="1.3.41">
Fixed in Apache httpd 1.3.41</h1><dl>
 <dd>
 moderate: 
 
 <name name="CVE-2007-6388">mod_status XSS</name>
 
 <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6388">CVE-2007-6388</a>
 
A flaw was found in the mod_status module. On sites where mod_status is
enabled and the status pages were publicly accessible, a cross-site
scripting attack is possible.
Note that the server-status page is not enabled by default and it is best practice to not make this publicly available.
 </dd>
 <dd>
 Reported to security team: 15th December 2007 
 Issue public: 2nd January 2008 </dd>
 <dd>
 Update Released: 19th January 2008 </dd>
 <dd>
 Affects: 
 1.3.39, 1.3.37, 1.3.36, 1.3.35, 1.3.34, 1.3.33, 1.3.32, 1.3.31, 1.3.29, 1.3.28, 1.3.27, 1.3.26, 1.3.24, 1.3.22, 1.3.20, 1.3.19, 1.3.17, 1.3.14, 1.3.12, 1.3.11, 1.3.9, 1.3.6, 1.3.4, 1.3.3, 1.3.2</dd>
 <dd>
 moderate: 
 
 <name name="CVE-2007-5000">mod_imap XSS</name>
 
 <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5000">CVE-2007-5000</a>
 
A flaw was found in the mod_imap module. On sites where
mod_imap is enabled and an imagemap file is publicly available, a
cross-site scripting attack is possible.
 </dd>
 <dd>
 Reported to security team: 23rd October 2007 
 Issue public: 11th December 2007 </dd>
 <dd>
 Update Released: 19th January 2008 </dd>
 <dd>
 Affects: 
 1.3.39, 1.3.37, 1.3.36, 1.3.35, 1.3.34, 1.3.33, 1.3.32, 1.3.31, 1.3.29, 1.3.28, 1.3.27, 1.3.26, 1.3.24, 1.3.22, 1.3.20, 1.3.19, 1.3.17, 1.3.14, 1.3.12, 1.3.11, 1.3.9, 1.3.6, 1.3.4, 1.3.3, 1.3.2, 1.3.1, 1.3.0</dd>
</dl><h1 id="1.3.39">
Fixed in Apache httpd 1.3.39</h1><dl>
 <dd>
 moderate: 
 
 <name name="CVE-2006-5752">mod_status cross-site scripting</name>
 
 <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5752">CVE-2006-5752</a>
 
A flaw was found in the mod_status module. On sites where the
server-status page is publicly accessible and ExtendedStatus is
enabled this could lead to a cross-site scripting attack.
Note that the server-status
page is not enabled by default and it is best practice to not make
this publicly available.
 </dd>
 <dd>
 Reported to security team: 19th October 2006 
 Issue public: 20th June 2007 </dd>
 <dd>
 Update Released: 7th September 2007 </dd>
 <dd>
 Affects: 
 1.3.37, 1.3.36, 1.3.35, 1.3.34, 1.3.33, 1.3.32, 1.3.31, 1.3.29, 1.3.28, 1.3.27, 1.3.26, 1.3.24, 1.3.22, 1.3.20, 1.3.19, 1.3.17, 1.3.14, 1.3.12, 1.3.11, 1.3.9, 1.3.6, 1.3.4, 1.3.3, 1.3.2</dd>
 <dd>
 moderate: 
 
 <name name="CVE-2007-3304">Signals to arbitrary processes</name>
 
 <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3304">CVE-2007-3304</a>
 The Apache HTTP server did not verify that a process
was an Apache child process before sending it signals. A local
attacker with the ability to run scripts on the HTTP server could
manipulate the scoreboard and cause arbitrary processes to be
terminated which could lead to a denial of service.
 </dd>
 <dd>
 Reported to security team: 15th May 2006 
 Issue public: 19th June 2007 </dd>
 <dd>
 Update Released: 7th September 2007 </dd>
 <dd>
 Affects: 
 1.3.37, 1.3.36, 1.3.35, 1.3.34, 1.3.33, 1.3.32, 1.3.31, 1.3.29, 1.3.28, 1.3.27, 1.3.26, 1.3.24, 1.3.22, 1.3.20, 1.3.19, 1.3.17, 1.3.14, 1.3.12, 1.3.11, 1.3.9, 1.3.6, 1.3.4, 1.3.3, 1.3.2, 1.3.1, 1.3.0</dd>
</dl><h1 id="1.3.37">
Fixed in Apache httpd 1.3.37</h1><dl>
 <dd>
 important: 
 
 <name name="CVE-2006-3747">mod_rewrite off-by-one error</name>
 
 <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3747">CVE-2006-3747</a>
 
An off-by-one flaw exists in the Rewrite module, mod_rewrite.
Depending on the manner in which Apache httpd was compiled, this
software defect may result in a vulnerability which, in combination
with certain types of Rewrite rules in the web server configuration
files, could be triggered remotely. For vulnerable builds, the nature
of the vulnerability can be denial of service (crashing of web server
processes) or potentially allow arbitrary code execution.

 </dd>
 <dd>
 Reported to security team: 21st July 2006 
 Issue public: 27th July 2006 </dd>
 <dd>
 Update Released: 27th July 2006 </dd>
 <dd>
 Affects: 
 1.3.36, 1.3.35, 1.3.34, 1.3.33, 1.3.32, 1.3.31, 1.3.29, 1.3.28</dd>
</dl><h1 id="1.3.35">
Fixed in Apache httpd 1.3.35</h1><dl>
 <dd>
 moderate: 
 
 <name name="CVE-2006-3918">Expect header Cross-Site Scripting</name>
 
 <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3918">CVE-2006-3918</a>
 
A flaw in the handling of invalid Expect headers. If an attacker can
influence the Expect header that a victim sends to a target site they
could perform a cross-site scripting attack. It is known that 
some versions of Flash can set an arbitrary Expect header which can 
trigger this flaw. Not marked as a security issue for 2.0 or
2.2 as the cross-site scripting is only returned to the victim after
the server times out a connection.

 </dd>
 <dd>
 Issue public: 8th May 2006 </dd>
 <dd>
 Update Released: 1st May 2006 </dd>
 <dd>
 Affects: 
 1.3.34, 1.3.33, 1.3.32, 1.3.31, 1.3.29, 1.3.28, 1.3.27, 1.3.26, 1.3.24, 1.3.22, 1.3.20, 1.3.19, 1.3.17, 1.3.14, 1.3.12, 1.3.11, 1.3.9, 1.3.6, 1.3.4, 1.3.3</dd>
 <dd>
 moderate: 
 
 <name name="CVE-2005-3352">mod_imap Referer Cross-Site Scripting</name>
 
 <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3352">CVE-2005-3352</a>
 
A flaw in mod_imap when using the Referer directive with image maps.
In certain site configurations a remote attacker could perform a cross-site
scripting attack if a victim can be forced to visit a malicious 
URL using certain web browsers. 

 </dd>
 <dd>
 Reported to security team: 1st November 2005 
 Issue public: 12th December 2005 </dd>
 <dd>
 Update Released: 1st May 2006 </dd>
 <dd>
 Affects: 
 1.3.34, 1.3.33, 1.3.32, 1.3.31, 1.3.29, 1.3.28, 1.3.27, 1.3.26, 1.3.24, 1.3.22, 1.3.20, 1.3.19, 1.3.17, 1.3.14, 1.3.12, 1.3.11, 1.3.9, 1.3.6, 1.3.4, 1.3.3, 1.3.2, 1.3.1, 1.3.0</dd>
</dl><h1 id="1.3.33">
Fixed in Apache httpd 1.3.33</h1><dl>
 <dd>
 moderate: 
 
 <name name="CVE-2004-0940">mod_include overflow</name>
 
 <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0940">CVE-2004-0940</a>
 
A buffer overflow in mod_include could allow a local user who
is authorised to create server side include (SSI) files to gain
the privileges of a httpd child.

 </dd>
 <dd>
 Issue public: 21st October 2004 </dd>
 <dd>
 Update Released: 28th October 2004 </dd>
 <dd>
 Affects: 
 1.3.32, 1.3.31, 1.3.29, 1.3.28, 1.3.27, 1.3.26, 1.3.24, 1.3.22, 1.3.20, 1.3.19, 1.3.17, 1.3.14, 1.3.12, 1.3.11, 1.3.9, 1.3.6, 1.3.4, 1.3.3, 1.3.2, 1.3.1, 1.3.0</dd>
</dl><h1 id="1.3.32">
Fixed in Apache httpd 1.3.32</h1><dl>
 <dd>
 moderate: 
 
 <name name="CVE-2004-0492">mod_proxy buffer overflow</name>
 
 <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0492">CVE-2004-0492</a>
 
A buffer overflow was found in the Apache proxy module, mod_proxy, which
can be triggered by receiving an invalid Content-Length header. In order
to exploit this issue an attacker would need to get an Apache installation
that was configured as a proxy to connect to a malicious site. This would
cause the Apache child processing the request to crash, although this does
not represent a significant Denial of Service attack as requests will
continue to be handled by other Apache child processes. This issue may
lead to remote arbitrary code execution on some BSD platforms.

 </dd>
 <dd>
 Reported to security team: 8th June 2003 
 Issue public: 10th June 2003 </dd>
 <dd>
 Update Released: 20th October 2004 </dd>
 <dd>
 Affects: 
 1.3.31, 1.3.29, 1.3.28, 1.3.27, 1.3.26</dd>
</dl><h1 id="1.3.31">
Fixed in Apache httpd 1.3.31</h1><dl>
 <dd>
 important: 
 
 <name name="CVE-2004-0174">listening socket starvation</name>
 
 <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0174">CVE-2004-0174</a>
 
A starvation issue on listening sockets occurs when a short-lived
connection on a rarely-accessed listening socket will cause a child to
hold the accept mutex and block out new connections until another
connection arrives on that rarely-accessed listening socket. This
issue is known to affect some versions of AIX, Solaris, and Tru64; it
is known to not affect FreeBSD or Linux.

</dd>
 <dd>
 Reported to security team: 25th February 2004 
 Issue public: 18th March 2004 </dd>
 <dd>
 Update Released: 12th May 2004 </dd>
 <dd>
 Affects: 
 1.3.29, 1.3.28?, 1.3.27?, 1.3.26?, 1.3.24?, 1.3.22?, 1.3.20?, 1.3.19?, 1.3.17?, 1.3.14?, 1.3.12?, 1.3.11?, 1.3.9?, 1.3.6?, 1.3.4?, 1.3.3?, 1.3.2?, 1.3.1?, 1.3.0?</dd>
 <dd>
 important: 
 
 <name name="CVE-2003-0993">Allow/Deny parsing on big-endian 64-bit platforms</name>
 
 <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0993">CVE-2003-0993</a>
 
A bug in the parsing of Allow/Deny rules using IP addresses
without a netmask on big-endian 64-bit platforms causes the rules
to fail to match.

 </dd>
 <dd>
 Issue public: 15th October 2003 </dd>
 <dd>
 Update Released: 12th May 2004 </dd>
 <dd>
 Affects: 
 1.3.29, 1.3.28, 1.3.27, 1.3.26, 1.3.24, 1.3.22, 1.3.20, 1.3.19, 1.3.17, 1.3.14, 1.3.12, 1.3.11, 1.3.9, 1.3.6, 1.3.4, 1.3.3, 1.3.2, 1.3.1, 1.3.0</dd>
 <dd>
 low: 
 
 <name name="CVE-2003-0020">Error log escape filtering</name>
 
 <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0020">CVE-2003-0020</a>
 
Apache does not filter terminal escape sequences from error logs,
which could make it easier for attackers to insert those sequences
into terminal emulators containing vulnerabilities related to escape
sequences.

 </dd>
 <dd>
 Issue public: 24th February 2003 </dd>
 <dd>
 Update Released: 12th May 2004 </dd>
 <dd>
 Affects: 
 1.3.29, 1.3.28, 1.3.27, 1.3.26, 1.3.24, 1.3.22, 1.3.20, 1.3.19, 1.3.17, 1.3.14, 1.3.12, 1.3.11, 1.3.9, 1.3.6, 1.3.4, 1.3.3, 1.3.2, 1.3.1, 1.3.0</dd>
 <dd>
 low: 
 
 <name name="CVE-2003-0987">mod_digest nonce checking</name>
 
 <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0987">CVE-2003-0987</a>

mod_digest does not properly verify the nonce of a client response by
using a AuthNonce secret.  This could allow a malicious user who is
able to sniff network traffic to conduct a replay attack against a
website using Digest protection.  Note that mod_digest implements an
older version of the MD5 Digest Authentication specification which
is known not to work with modern browsers.  This issue does not affect
mod_auth_digest.

</dd>
 <dd>
 Issue public: 18th December 2003 </dd>
 <dd>
 Update Released: 12th May 2004 </dd>
 <dd>
 Affects: 
 1.3.29, 1.3.28, 1.3.27, 1.3.26, 1.3.24, 1.3.22, 1.3.20, 1.3.19, 1.3.17, 1.3.14, 1.3.12, 1.3.11, 1.3.9, 1.3.6, 1.3.4, 1.3.3, 1.3.2, 1.3.1, 1.3.0</dd>
</dl><h1 id="1.3.29">
Fixed in Apache httpd 1.3.29</h1><dl>
 <dd>
 low: 
 
 <name name="CVE-2003-0542">Local configuration regular expression overflow</name>
 
 <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0542">CVE-2003-0542</a>
 
By using a regular expression with more than 9 captures a buffer
overflow can occur in mod_alias or mod_rewrite. To exploit this an
attacker would need to be able to create a carefully crafted configuration
file (.htaccess or httpd.conf)

 </dd>
 <dd>
 Reported to security team: 4th August 2003 
 Issue public: 27th October 2003 </dd>
 <dd>
 Update Released: 27th October 2003 </dd>
 <dd>
 Affects: 
 1.3.28, 1.3.27, 1.3.26, 1.3.24, 1.3.22, 1.3.20, 1.3.19, 1.3.17, 1.3.14, 1.3.12, 1.3.11, 1.3.9, 1.3.6, 1.3.4, 1.3.3, 1.3.2, 1.3.1, 1.3.0</dd>
</dl><h1 id="1.3.28">
Fixed in Apache httpd 1.3.28</h1><dl>
 <dd>
 important: 
 
 <name name="CVE-2003-0460">RotateLogs DoS</name>
 
 <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0460">CVE-2003-0460</a>
 The rotatelogs support program on Win32 and OS/2 would quit logging
and exit if it received special control characters such as 0x1A.

 </dd>
 <dd>
 Reported to security team: 4th July 2003 
 Issue public: 18th July 2003 </dd>
 <dd>
 Update Released: 18th July 2003 </dd>
 <dd>
 Affects: 
 1.3.27, 1.3.26?, 1.3.24?, 1.3.22?, 1.3.20?, 1.3.19?, 1.3.17?, 1.3.14?, 1.3.12?, 1.3.11?, 1.3.9?, 1.3.6?, 1.3.4?, 1.3.3?, 1.3.2?, 1.3.1?, 1.3.0?</dd>
</dl><h1 id="1.3.27">
Fixed in Apache httpd 1.3.27</h1><dl>
 <dd>
 important: 
 
 <name name="CVE-2002-0843">Buffer overflows in ab utility</name>
 
 <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0843">CVE-2002-0843</a>
 Buffer overflows in the benchmarking utility ab could be exploited if
ab is run against a malicious server

 </dd>
 <dd>
 Reported to security team: 23rd September 2002 
 Issue public: 3rd October 2002 </dd>
 <dd>
 Update Released: 3rd October 2002 </dd>
 <dd>
 Affects: 
 1.3.26, 1.3.24, 1.3.22, 1.3.20, 1.3.19, 1.3.17, 1.3.14, 1.3.12, 1.3.11, 1.3.9, 1.3.6, 1.3.4, 1.3.3, 1.3.2, 1.3.1, 1.3.0</dd>
 <dd>
 important: 
 
 <name name="CVE-2002-0839">Shared memory permissions lead to local privilege escalation</name>
 
 <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0839">CVE-2002-0839</a>
 The permissions of the shared memory used for the scoreboard
allows an attacker who can execute under
the Apache UID to send a signal to any process as root or cause a local 
denial of service attack.

 </dd>
 <dd>
 Reported to security team: 11th November 2001 
 Issue public: 3rd October 2002 </dd>
 <dd>
 Update Released: 3rd October 2002 </dd>
 <dd>
 Affects: 
 1.3.26, 1.3.24, 1.3.22, 1.3.20, 1.3.19, 1.3.17, 1.3.14, 1.3.12, 1.3.11, 1.3.9, 1.3.6, 1.3.4, 1.3.3, 1.3.2, 1.3.1, 1.3.0</dd>
 <dd>
 low: 
 
 <name name="CVE-2002-0840">Error page XSS using wildcard DNS</name>
 
 <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0840">CVE-2002-0840</a>
 Cross-site scripting (XSS) vulnerability in the default error page of
Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when
UseCanonicalName is "Off" and support for wildcard DNS is present,
allows remote attackers to execute script as other web page visitors
via the Host: header.
 </dd>
 <dd>
 Reported to security team: 20th September 2002 
 Issue public: 2nd October 2002 </dd>
 <dd>
 Update Released: 3rd October 2002 </dd>
 <dd>
 Affects: 
 1.3.26, 1.3.24, 1.3.22, 1.3.20, 1.3.19, 1.3.17, 1.3.14, 1.3.12, 1.3.11, 1.3.9, 1.3.6, 1.3.4, 1.3.3, 1.3.2, 1.3.1, 1.3.0</dd>
</dl><h1 id="1.3.26">
Fixed in Apache httpd 1.3.26</h1><dl>
 <dd>
 critical: 
 
 <name name="CVE-2002-0392">Apache Chunked encoding vulnerability</name>
 
 <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0392">CVE-2002-0392</a>
 Requests to all versions of Apache 1.3 can cause various effects
ranging from a relatively harmless increase in
system resources through to denial of service attacks and in some
cases the ability to be remotely exploited.
 </dd>
 <dd>
 Reported to security team: 27th May 2002 
 Issue public: 17th June 2002 </dd>
 <dd>
 Update Released: 18th June 2002 </dd>
 <dd>
 Affects: 
 1.3.24, 1.3.22, 1.3.20, 1.3.19, 1.3.17, 1.3.14, 1.3.12, 1.3.11, 1.3.9, 1.3.6, 1.3.4, 1.3.3, 1.3.2, 1.3.1, 1.3.0</dd>
 <dd>
 low: 
 
 <name name="CVE-2003-0083">Filtered escape sequences</name>
 
 <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0083">CVE-2003-0083</a>
 
Apache does not filter terminal escape sequences from its
access logs, which could make it easier for attackers to insert those
sequences into terminal emulators containing vulnerabilities related
to escape sequences,

 </dd>
 <dd>
 Issue public: 24th February 2003 </dd>
 <dd>
 Update Released: 18th June 2002 </dd>
 <dd>
 Affects: 
 1.3.24, 1.3.22, 1.3.20, 1.3.19, 1.3.17, 1.3.14, 1.3.12, 1.3.11, 1.3.9, 1.3.6, 1.3.4, 1.3.3, 1.3.2, 1.3.1, 1.3.0</dd>
</dl><h1 id="1.3.24">
Fixed in Apache httpd 1.3.24</h1><dl>
 <dd>
 critical: 
 
 <name name="CVE-2002-0061">Win32 Apache Remote command execution</name>
 
 <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0061">CVE-2002-0061</a>
 Apache for Win32 before 1.3.24 and 2.0.34-beta allows remote 
attackers to execute arbitrary commands via parameters passed
to batch file CGI scripts.
 </dd>
 <dd/>
 <dd>
 Update Released: 22nd March 2002 </dd>
 <dd>
 Affects: 
 1.3.22, 1.3.20?, 1.3.19?, 1.3.17?, 1.3.14?, 1.3.12?, 1.3.11?, 1.3.9?, 1.3.6?, 1.3.4?, 1.3.3?, 1.3.2?, 1.3.1?, 1.3.0?</dd>
</dl><h1 id="1.3.22">
Fixed in Apache httpd 1.3.22</h1><dl>
 <dd>
 important: 
 
 <name name="CVE-2001-0729">Requests can cause directory listing to be displayed</name>
 
 <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0729">CVE-2001-0729</a>
 A vulnerability was found in the Win32 port of
Apache 1.3.20. A client submitting a very long URI
could cause a directory listing to be returned rather than
the default index page. 
 </dd>
 <dd>
 Reported to security team: 18th September 2001 
 Issue public: 28th September 2001 </dd>
 <dd>
 Update Released: 12th October 2001 </dd>
 <dd>
 Affects: 
 1.3.20</dd>
 <dd>
 important: 
 
 <name name="CVE-2001-0731">Multiviews can cause a directory listing to be displayed</name>
 
 <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0731">CVE-2001-0731</a>
 A vulnerability was found when <directive>Multiviews</directive> 
 are used to negotiate the directory index. In some
 configurations, requesting a URI with a <samp>QUERY_STRING</samp> of 
 <samp>M=D</samp> could
 return a directory listing rather than the expected index page.
 </dd>
 <dd>
 Issue public: 9th July 2001 </dd>
 <dd>
 Update Released: 12th October 2001 </dd>
 <dd>
 Affects: 
 1.3.20, 1.3.19?, 1.3.17?, 1.3.14?, 1.3.12?, 1.3.11?, 1.3.9?, 1.3.6?, 1.3.4?, 1.3.3?, 1.3.2?, 1.3.1?, 1.3.0?</dd>
 <dd>
 moderate: 
 
 <name name="CVE-2001-0730">split-logfile can cause arbitrary log files to be written to</name>
 
 <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0730">CVE-2001-0730</a>
 A vulnerability was found in the <samp>split-logfile</samp> support
 program. A request with a specially crafted <samp>Host:</samp>
 header could allow any file with a <samp>.log</samp> extension on 
 the system to be written to. 
 </dd>
 <dd>
 Issue public: 28th September 2001 </dd>
 <dd>
 Update Released: 12th October 2001 </dd>
 <dd>
 Affects: 
 1.3.20, 1.3.19, 1.3.17, 1.3.14, 1.3.12, 1.3.11, 1.3.9, 1.3.6, 1.3.4, 1.3.3, 1.3.2, 1.3.1, 1.3.0</dd>
</dl><h1 id="1.3.20">
Fixed in Apache httpd 1.3.20</h1><dl>
 <dd>
 important: 
 
 <name name="CVE-2001-1342">Denial of service attack on Win32 and OS2</name>
 
 <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1342">CVE-2001-1342</a>
 A vulnerability was found in the Win32 and OS2 ports of Apache 1.3. A
 client submitting a carefully constructed URI could cause a General
 Protection Fault in a child process, bringing up a message box which
 would have to be cleared by the operator to resume operation. This
 vulnerability introduced no identified means to compromise the server
 other than introducing a possible denial of service. 
 </dd>
 <dd/>
 <dd>
 Update Released: 22nd May 2001 </dd>
 <dd>
 Affects: 
 1.3.20, 1.3.19?, 1.3.17?, 1.3.14?, 1.3.12?, 1.3.11?, 1.3.9?, 1.3.6?, 1.3.4?, 1.3.3?, 1.3.2?, 1.3.1?, 1.3.0?</dd>
</dl><h1 id="1.3.19">
Fixed in Apache httpd 1.3.19</h1><dl>
 <dd>
 important: 
 
 <name name="CVE-2001-0925">Requests can cause directory listing to be displayed</name>
 
 <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0925">CVE-2001-0925</a>
 The default installation can lead <samp>mod_negotiation</samp> and 
 <samp>mod_dir</samp> or <samp>mod_autoindex</samp> to display a 
 directory listing instead of the multiview index.html file if a 
 very long path was created artificially by using many slashes. 
 </dd>
 <dd/>
 <dd>
 Update Released: 28th February 2001 </dd>
 <dd>
 Affects: 
 1.3.17, 1.3.14, 1.3.12, 1.3.11</dd>
</dl><h1 id="1.3.14">
Fixed in Apache httpd 1.3.14</h1><dl>
 <dd>
 important: 
 
 <name name="CVE-2000-0913">Rewrite rules that include references allow access to any file</name>
 
 <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0913">CVE-2000-0913</a>
 The Rewrite module, <samp>mod_rewrite</samp>, can allow access to
 any file on the web server. The vulnerability occurs only with
 certain specific cases of using regular expression references in
 <samp>RewriteRule</samp> directives: If the destination
 of a <samp>RewriteRule</samp> contains regular expression references
 then an attacker will be able to access any file on the server.
 </dd>
 <dd>
 Issue public: 29th September 2000 </dd>
 <dd>
 Update Released: 13th October 2000 </dd>
 <dd>
 Affects: 
 1.3.12, 1.3.11?, 1.3.9?, 1.3.6?, 1.3.4?, 1.3.3?, 1.3.2?, 1.3.1?, 1.3.0?</dd>
 <dd>
 important: 
 
 <name name="CVE-2000-1204">Mass virtual hosting can display CGI source</name>
 
 <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-1204">CVE-2000-1204</a>
 A security problem for users of the mass virtual hosting module, 
 <samp>mod_vhost_alias</samp>, causes
 the source to a CGI to be sent if the <samp>cgi-bin</samp> directory is 
 under the document root. However, it is not normal to have your 
 cgi-bin directory under a document root.
 </dd>
 <dd/>
 <dd>
 Update Released: 13th October 2000 </dd>
 <dd>
 Affects: 
 1.3.12, 1.3.11, 1.3.9</dd>
 <dd>
 moderate: 
 
 <name name="CVE-2000-0505">Requests can cause directory listing to be displayed on NT</name>
 
 <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0505">CVE-2000-0505</a>
 A security hole on Apache for Windows allows a user to 
 view the listing of a 
 directory instead of the default HTML page by sending a carefully 
 constructed request.
 </dd>
 <dd/>
 <dd>
 Update Released: 13th October 2000 </dd>
 <dd>
 Affects: 
 1.3.12, 1.3.11?, 1.3.9?, 1.3.6?, 1.3.4?, 1.3.3?, 1.3.2?, 1.3.1?, 1.3.0?</dd>
</dl><h1 id="1.3.12">
Fixed in Apache httpd 1.3.12</h1><dl>
 <dd>
 important: 
 
 <name name="CVE-2000-1205">Cross-site scripting can reveal private session information</name>
 
 <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-1205">CVE-2000-1205</a>
 Apache was vulnerable to cross site scripting issues.
 It was shown that malicious HTML tags can be embedded in client web 
 requests if the server or script handling the request does not 
 carefully encode all information displayed to 
 the user. Using these vulnerabilities attackers could, for 
 example, obtain copies of your private 
 cookies used to authenticate
 you to other sites.
 </dd>
 <dd/>
 <dd>
 Update Released: 25th February 2000 </dd>
 <dd>
 Affects: 
 1.3.11, 1.3.9, 1.3.6, 1.3.4, 1.3.3, 1.3.2, 1.3.1, 1.3.0</dd>
</dl><h1 id="1.3.11">
Fixed in Apache httpd 1.3.11</h1><dl>
 <dd>
 moderate: 
 
 <name name="CVE-2000-1206">Mass virtual hosting security issue</name>
 
 <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-1206">CVE-2000-1206</a>
 A security problem can occur for sites using mass name-based virtual 
hosting (using
the new <samp>mod_vhost_alias</samp> module) or with special 
<samp>mod_rewrite</samp> rules.

</dd>
 <dd/>
 <dd>
 Update Released: 21st January 2000 </dd>
 <dd>
 Affects: 
 1.3.9, 1.3.6?, 1.3.4?, 1.3.3?, 1.3.2?, 1.3.1?, 1.3.0?</dd>
</dl><h1 id="1.3.4">
Fixed in Apache httpd 1.3.4</h1><dl>
 <dd>
 important: 
 
 <name name="">Denial of service attack on Win32</name>
 
 There have been a number of important security fixes to Apache on
Windows. The most important is that there is much better protection
against people trying to access special DOS device names (such as
"nul"). 
 </dd>
 <dd/>
 <dd>
 Update Released: 11th January 1999 </dd>
 <dd>
 Affects: 
 1.3.3, 1.3.2, 1.3.1, 1.3.0</dd>
</dl><h1 id="1.3.2">
Fixed in Apache httpd 1.3.2</h1><dl>
 <dd>
 important: 
 
 <name name="CVE-1999-1199">Multiple header Denial of Service vulnerability</name>
 
 <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-1199">CVE-1999-1199</a>
 A serious problem exists when a client
sends a large number of headers with the same header name. Apache uses
up memory faster than the amount of memory required to simply store
the received data itself. That is, memory use increases faster and
faster as more headers are received, rather than increasing at a
constant rate. This makes a denial of service attack based on this
method more effective than methods which cause Apache to use memory at
a constant rate, since the attacker has to send less data.
 </dd>
 <dd/>
 <dd>
 Update Released: 23rd September 1998 </dd>
 <dd>
 Affects: 
 1.3.1, 1.3.0</dd>
 <dd>
 important: 
 
 <name name="">Denial of service attacks</name>
 
 Apache 1.3.2 has
better protection against denial of service attacks. These are when
people make excessive requests to the server to try and prevent other
people using it. In 1.3.2 there are several new directives which can
limit the size of requests (these directives all start with the word
<SAMP>Limit</SAMP>).

 </dd>
 <dd/>
 <dd>
 Update Released: 23rd September 1998 </dd>
 <dd>
 Affects: 
 1.3.1, 1.3.0</dd>
</dl>

<div id="footer">
 
 Copyright &copy; 2012 The Apache Software Foundation. 
Apache HTTP Server, Apache, and the Apache feather logo are trademarks of The Apache Software Foundation.
 
 </div>
 </div>
 </body>
 </html>