Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

apache http server 2.0.45 vulnerabilities and exploits

(subscribe to this query)

5
CVSSv2
CVE-2003-0189
The authentication module for Apache 2.0.40 through 2.0.45 on Unix does not properly handle threads safely when using the crypt_r or crypt functions, which allows remote attackers to cause a denial of service (failed Basic authentication with valid usernames and passwords) when...
Apache Http Server 2.0.40Apache Http Server 2.0.41Apache Http Server 2.0.42Apache Http Server 2.0.43Apache Http Server 2.0.44Apache Http Server 2.0.45
5
CVSSv2
CVE-2003-0245
Vulnerability in the apr_psprintf function in the Apache Portable Runtime (APR) library for Apache 2.0.37 through 2.0.45 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long strings, as demonstrated using XML objects to...
Apache Http Server 2.0.37Apache Http Server 2.0.38Apache Http Server 2.0.39Apache Http Server 2.0.40Apache Http Server 2.0.41Apache Http Server 2.0.42Apache Http Server 2.0.43Apache Http Server 2.0.44Apache Http Server 2.0.45
4.6
CVSSv2
CVE-2004-0747
Buffer overflow in Apache 2.0.50 and earlier allows local users to gain apache privileges via a .htaccess file that causes the overflow during expansion of environment variables....
Apache Http Server 2.0Apache Http Server 2.0.28Apache Http Server 2.0.32Apache Http Server 2.0.35Apache Http Server 2.0.36Apache Http Server 2.0.37Apache Http Server 2.0.38Apache Http Server 2.0.39Apache Http Server 2.0.40Apache Http Server 2.0.41Apache Http Server 2.0.42Apache Http Server 2.0.43Apache Http Server 2.0.44Apache Http Server 2.0.45Apache Http Server 2.0.46Apache Http Server 2.0.47Apache Http Server 2.0.48Apache Http Server 2.0.49Apache Http Server 2.0.50
5
CVSSv2
CVE-2004-0113
Memory leak in ssl_engine_io.c for mod_ssl in Apache 2 before 2.0.49 allows remote attackers to cause a denial of service (memory consumption) via plain HTTP requests to the SSL port of an SSL-enabled server....
Apache Http Server 2.0.35Apache Http Server 2.0.36Apache Http Server 2.0.37Apache Http Server 2.0.38Apache Http Server 2.0.39Apache Http Server 2.0.40Apache Http Server 2.0.41Apache Http Server 2.0.42Apache Http Server 2.0.43Apache Http Server 2.0.44Apache Http Server 2.0.45Apache Http Server 2.0.46Apache Http Server 2.0.47Apache Http Server 2.0.48
4.3
CVSSv2
CVE-2005-2088
The Apache HTTP server before 1.3.34, and 2.0.x before 2.0.55, when acting as an HTTP proxy, allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding:...
Apache Http Server 1.3.29Apache Http Server 1.3.30Apache Http Server 1.3.31Apache Http Server 1.3.32Apache Http Server 1.3.33Apache Http Server 2.0.45Apache Http Server 2.0.46Apache Http Server 2.0.47Apache Http Server 2.0.48Apache Http Server 2.0.49Apache Http Server 2.0.50Apache Http Server 2.0.51Apache Http Server 2.0.52Apache Http Server 2.0.53Apache Http Server 2.0.54
5
CVSSv2
CVE-2003-0134
Unknown vulnerability in filestat.c for Apache running on OS2, versions 2.0 through 2.0.45, allows unknown attackers to cause a denial of service via requests related to device names....
Apache Http Server 2.0Apache Http Server 2.0.9Apache Http Server 2.0.28Apache Http Server 2.0.32Apache Http Server 2.0.35Apache Http Server 2.0.36Apache Http Server 2.0.37Apache Http Server 2.0.38Apache Http Server 2.0.39Apache Http Server 2.0.40Apache Http Server 2.0.41Apache Http Server 2.0.42Apache Http Server 2.0.43Apache Http Server 2.0.44Apache Http Server 2.0.45
5
CVSSv2
CVE-2003-0253
The prefork MPM in Apache 2 before 2.0.47 does not properly handle certain errors from accept, which could lead to a denial of service....
Apache Http Server 2.0Apache Http Server 2.0.28Apache Http Server 2.0.32Apache Http Server 2.0.35Apache Http Server 2.0.36Apache Http Server 2.0.37Apache Http Server 2.0.38Apache Http Server 2.0.39Apache Http Server 2.0.40Apache Http Server 2.0.41Apache Http Server 2.0.42Apache Http Server 2.0.43Apache Http Server 2.0.44Apache Http Server 2.0.45Apache Http Server 2.0.46
5
CVSSv2
CVE-2003-0254
Apache 2 before 2.0.47, when running on an IPv6 host, allows attackers to cause a denial of service (CPU consumption by infinite loop) when the FTP proxy server fails to create an IPv6 socket....
Apache Http Server 2.0Apache Http Server 2.0.28Apache Http Server 2.0.32Apache Http Server 2.0.35Apache Http Server 2.0.36Apache Http Server 2.0.37Apache Http Server 2.0.38Apache Http Server 2.0.39Apache Http Server 2.0.40Apache Http Server 2.0.41Apache Http Server 2.0.42Apache Http Server 2.0.43Apache Http Server 2.0.44Apache Http Server 2.0.45Apache Http Server 2.0.46
6.4
CVSSv2
CVE-2003-0192
Apache 2 before 2.0.47, and certain versions of mod_ssl for Apache 1.3, do not properly handle "certain sequences of per-directory renegotiations and the SSLCipherSuite directive being used to upgrade from a weak ciphersuite to a strong one," which could cause Apache...
Apache Http Server 2.0Apache Http Server 2.0.28Apache Http Server 2.0.32Apache Http Server 2.0.35Apache Http Server 2.0.36Apache Http Server 2.0.37Apache Http Server 2.0.38Apache Http Server 2.0.39Apache Http Server 2.0.40Apache Http Server 2.0.41Apache Http Server 2.0.42Apache Http Server 2.0.43Apache Http Server 2.0.44Apache Http Server 2.0.45Apache Http Server 2.0.46
4.3
CVSSv2
CVE-2003-1307
** DISPUTED ** The mod_php module for the Apache HTTP Server allows local users with write access to PHP scripts to send signals to the server's process group and use the server's file descriptors, as demonstrated by sending a STOP signal, then intercepting incoming...
Apache Http Server 2.0Apache Http Server 2.0.9Apache Http Server 2.0.28Apache Http Server 2.0.32Apache Http Server 2.0.34Apache Http Server 2.0.35Apache Http Server 2.0.36Apache Http Server 2.0.37Apache Http Server 2.0.38Apache Http Server 2.0.39Apache Http Server 2.0.40Apache Http Server 2.0.41Apache Http Server 2.0.42Apache Http Server 2.0.43Apache Http Server 2.0.44Apache Http Server 2.0.45Apache Http Server 2.0.46Apache Http Server 2.0.47Apache Http Server 2.0.48
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-24686CVE-2021-21298CVE-2021-69420server-side request forgeryCVE-2021-23957microsoftSSTI.netSQLCVE-2021-21273CVE-2021-25281