Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

apache http server 1.3 vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2007-1860
mod_jk in Apache Tomcat JK Web Server Connector 1.2.x prior to 1.2.23 decodes request URLs within the Apache HTTP Server before passing the URL to Tomcat, which allows remote malicious users to access protected pages via a crafted prefix JkMount, possibly involving double-encoded...
Apache Tomcat Jk Web Server Connector
6.9
CVSSv2
CVE-2004-0940
Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as the apache user via SSI (XSSI) documents that trigger a length calculation error.
Openpkg Openpkg 2.0Openpkg Openpkg 2.1Openpkg Openpkg 2.2Apache Http ServerSlackware Slackware Linux 9.0Slackware Slackware Linux 8.1Slackware Slackware Linux 10.0Hp Hp-ux 11.11Suse Suse Linux 9.2Suse Suse Linux 9.0Slackware Slackware Linux 8.0Suse Suse Linux 8.2Slackware Slackware Linux 9.1Slackware Slackware Linux CurrentSuse Suse Linux 8.0Trustix Secure Linux 1.5Hp Hp-ux 11.00Hp Hp-ux 11.22Suse Suse Linux 9.1Hp Hp-ux 11.20Suse Suse Linux 8.1
5
CVSSv2
CVE-2017-3164
Server Side Request Forgery in Apache Solr, versions 1.3 until 7.6 (inclusive). Since the "shards" parameter does not have a corresponding whitelist mechanism, a remote attacker with access to the server could make Solr perform an HTTP GET request to any reachable URL.
Apache Solr
7.8
CVSSv2
CVE-2011-3192
The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x up to and including 2.0.64, and 2.2.x up to and including 2.2.19 allows remote malicious users to cause a denial of service (memory and CPU consumption) via a Range header that expresses multiple overlapping ranges, as e...
Apache Http ServerSuse Linux Enterprise Server 11Opensuse Opensuse 11.4Opensuse Opensuse 11.3Suse Linux Enterprise Software Development Kit 10Suse Linux Enterprise Server 10Suse Linux Enterprise Software Development Kit 11Canonical Ubuntu Linux 10.10Canonical Ubuntu Linux 11.04Canonical Ubuntu Linux 8.04Canonical Ubuntu Linux 10.04
7.5
CVSSv2
CVE-2016-0718
Expat allows context-dependent malicious users to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow.
Mozilla FirefoxApple Mac Os XSuse Linux Enterprise Server 11Suse Studio Onsite 1.3Suse Linux Enterprise Software Development Kit 11Suse Linux Enterprise Debuginfo 11Opensuse Leap 42.1Suse Linux Enterprise Software Development Kit 12Suse Linux Enterprise Server 12Suse Linux Enterprise Desktop 12Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 14.04Libexpat Project LibexpatDebian Debian Linux 8.0Opensuse Opensuse 13.1Opensuse Opensuse 13.2Mcafee Policy AuditorPython Python
7.5
CVSSv2
CVE-2020-1938
When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exp...
Apache TomcatApache Geode 1.12.0Fedoraproject Fedora 30Fedoraproject Fedora 31Fedoraproject Fedora 32Oracle Transportation Management 6.3.7Oracle Hospitality Guest Access 4.2.0Oracle Hospitality Guest Access 4.2.1Oracle Agile Plm 9.3.3Oracle Agile Plm 9.3.5Oracle Agile Plm 9.3.6Oracle Instantis EnterprisetrackOracle Mysql Enterprise MonitorOracle Health Sciences Empirica Signal 7.3.3Oracle Communications Instant Messaging Server 10.0.1.4.0Oracle Communications Element Manager 8.2.0Oracle Communications Element Manager 8.2.1Oracle Communications Element Manager 8.1.1Oracle Workload Manager 18cOracle Workload Manager 19cOracle Workload Manager 12.2.0.1Oracle Agile Engineering Data Management 6.2.1.0
5.8
CVSSv2
CVE-2019-17569
The refactoring present in Apache Tomcat 9.0.28 to 9.0.30, 8.5.48 to 8.5.50 and 7.0.98 to 7.0.99 introduced a regression. The result of the regression was that invalid Transfer-Encoding headers were incorrectly processed leading to a possibility of HTTP Request Smuggling if Tomca...
Apache TomcatApache Tomee 7.0.7Opensuse Leap 15.1Netapp Oncommand System ManagerNetapp Data Availability Services -Debian Debian Linux 9.0Debian Debian Linux 10.0Oracle Transportation Management 6.3.7Oracle Hospitality Guest Access 4.2.0Oracle Hospitality Guest Access 4.2.1Oracle Agile Plm 9.3.3Oracle Agile Plm 9.3.5Oracle Agile Plm 9.3.6Oracle Instantis EnterprisetrackOracle Mysql Enterprise MonitorOracle Health Sciences Empirica Signal 7.3.3Oracle Communications Instant Messaging Server 10.0.1.4.0Oracle Workload Manager 18cOracle Workload Manager 19cOracle Workload Manager 12.2.0.1Oracle Agile Engineering Data Management 6.2.1.0Oracle Health Sciences Empirica Inspections 1.0.1.2
NA
CVE-2023-45853
MiniZip in zlib up to and including 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip up to and including 0.2.6 i...
Zlib Zlib
7.5
CVSSv2
CVE-2006-2489
Integer overflow in CGI scripts in Nagios 1.x prior to 1.4.1 and 2.x prior to 2.3.1 allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a content length (Content-Length) HTTP header. NOTE: this is a different vulnerability th...
Nagios Nagios 1.0Nagios Nagios 1.0b1Nagios Nagios 1.2Nagios Nagios 1.3Nagios Nagios 2.0b5Nagios Nagios 2.0b6Nagios Nagios 1.0b2Nagios Nagios 1.0b3Nagios Nagios 1.4Nagios Nagios 2.0Nagios Nagios 2.0rc1Nagios Nagios 2.0rc2Nagios Nagios 1.0b6Nagios Nagios 1.1Nagios Nagios 2.0b3Nagios Nagios 2.0b4Nagios Nagios 2.3Nagios Nagios 1.0b4Nagios Nagios 1.0b5Nagios Nagios 2.0b1Nagios Nagios 2.0b2Nagios Nagios 2.1
5.8
CVSSv2
CVE-2020-1935
In Apache Tomcat 9.0.0.M1 to 9.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99 the HTTP header parsing code used an approach to end-of-line parsing that allowed some invalid HTTP headers to be parsed as valid. This led to a possibility of HTTP Request Smuggling if Tomcat was located be...
Apache Tomcat 9.0.0Apache TomcatDebian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Canonical Ubuntu Linux 16.04Opensuse Leap 15.1Netapp Oncommand System ManagerNetapp Data Availability Services -Oracle Transportation Management 6.3.7Oracle Hospitality Guest Access 4.2.0Oracle Hospitality Guest Access 4.2.1Oracle Retail Order Broker 15.0Oracle Agile Product Lifecycle Management 9.3.3Oracle Agile Product Lifecycle Management 9.3.5Oracle Agile Product Lifecycle Management 9.3.6Oracle Instantis EnterprisetrackOracle Health Sciences Empirica Signal 7.3.3Oracle Communications Instant Messaging Server 10.0.1.4.0Oracle Communications Element Manager 8.2.0Oracle Communications Element Manager 8.2.1Oracle Communications Element Manager 8.1.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-47626CVE-2024-3400physicalCVE-2024-31426CVE-2024-22423CVE-2024-22438injectlocal usersCVE-2024-3797
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook