Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

apache http server 1.1.1 vulnerabilities and exploits

(subscribe to this query)
NA

CVE-1999-0107

Buffer overflow in Apache 1.2.5 and previous versions allows a remote malicious user to cause a denial of service with a large number of GET requests containing a large number of / characters.
Apache Http Server 0.8.11Apache Http Server 0.8.14Apache Http Server 1.0Apache Http Server 1.0.2Apache Http Server 1.0.3Apache Http Server 1.0.5Apache Http Server 1.1Apache Http Server 1.1.1Apache Http Server 1.2.5
NA

CVE-2000-0913

mod_rewrite in Apache 1.3.12 and previous versions allows remote malicious users to read arbitrary files if a RewriteRule directive is expanded to include a filename whose name contains a regular expression.
Apache Http Server 0.8.11Apache Http Server 0.8.14Apache Http Server 1.0Apache Http Server 1.0.2Apache Http Server 1.0.3Apache Http Server 1.0.5Apache Http Server 1.1Apache Http Server 1.1.1Apache Http Server 1.3.11Apache Http Server 1.3.12
NA

CVE-1999-0071

Apache httpd cookie buffer overflow for versions 1.1.1 and previous versions.
Apache Http Server 1.1.1
NA

CVE-2004-0173

Directory traversal vulnerability in Apache 1.3.29 and previous versions, and Apache 2.0.48 and previous versions, when running on Cygwin, allows remote malicious users to read arbitrary files via a URL containing "..%5C" (dot dot encoded backslash) sequences.
Apache Http Server 0.8.11Apache Http Server 0.8.14Apache Http Server 1.0Apache Http Server 1.0.2Apache Http Server 1.0.3Apache Http Server 1.0.5Apache Http Server 1.1Apache Http Server 1.1.1Apache Http Server 1.2Apache Http Server 1.2.5Apache Http Server 1.3
NA

CVE-2004-0263

PHP 4.3.4 and previous versions in Apache 1.x and 2.x (mod_php) can leak global variables between virtual hosts that are handled by the same Apache child process but have different settings, which could allow remote malicious users to obtain sensitive information.
Apache Http Server 1.0Apache Http Server 1.0.2Apache Http Server 1.0.3Apache Http Server 1.0.5Apache Http Server 1.1Apache Http Server 1.1.1Apache Http Server 1.2Apache Http Server 1.2.5Apache Http Server 1.3Apache Http Server 1.3.1Apache Http Server 1.3.3Apache Http Server 1.3.4
NA

CVE-2007-6750

The Apache HTTP Server 1.x and 2.x allows remote malicious users to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris, related to the lack of the mod_reqtimeout module in versions prior to 2.2.15.
Apache Http ServerApache Http Server 1.0Apache Http Server 1.0.2Apache Http Server 1.0.3Apache Http Server 1.0.5Apache Http Server 1.1Apache Http Server 1.1.1Apache Http Server 1.2Apache Http Server 1.2.4Apache Http Server 1.2.5Apache Http Server 1.2.6Apache Http Server 1.2.9
NA

CVE-2009-0023

The apr_strmatch_precompile function in strmatch/apr_strmatch.c in Apache APR-util prior to 1.3.5 allows remote malicious users to cause a denial of service (daemon crash) via crafted input involving (1) a .htaccess file used with the Apache HTTP Server, (2) the SVNMasterURI dire...
Apache Apr-utilApache Apr-util 0.9.1Apache Apr-util 0.9.2Apache Apr-util 0.9.3Apache Apr-util 0.9.4Apache Apr-util 0.9.5Apache Apr-util 1.0Apache Apr-util 1.0.1Apache Apr-util 1.0.2Apache Apr-util 1.1.0Apache Apr-util 1.1.1Apache Apr-util 1.1.2
9.8
CVSSv3

CVE-2022-23943

Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an malicious user to overwrite heap memory with possibly attacker provided data. This issue affects Apache HTTP Server 2.4 version 2.4.52 and prior versions.
Apache Http ServerFedoraproject Fedora 34Fedoraproject Fedora 35Fedoraproject Fedora 36Debian Debian Linux 9.0Oracle Http Server 12.2.1.3.0Oracle Http Server 12.2.1.4.0Oracle Zfs Storage Appliance Kit 8.8
7.5
CVSSv3

CVE-2019-0190

A bug exists in the way mod_ssl handled client renegotiations. A remote attacker could send a carefully crafted request that would cause mod_ssl to enter a loop leading to a denial of service. This bug can be only triggered with Apache HTTP Server version 2.4.37 when using OpenSS...
Apache Http Server 2.4.37Oracle Enterprise Manager Ops Center 12.3.3Oracle Hospitality Guest Access 4.2.0Oracle Hospitality Guest Access 4.2.1Oracle Instantis Enterprisetrack 17.1Oracle Instantis Enterprisetrack 17.2Oracle Instantis Enterprisetrack 17.3Oracle Retail Xstore Point Of Service 7.0Oracle Retail Xstore Point Of Service 7.1
7.5
CVSSv3

CVE-2016-3083

Apache Hive (JDBC + HiveServer2) implements SSL for plain TCP and HTTP connections (it supports both transport modes). While validating the server's certificate during the connection setup, the client in Apache Hive prior to 1.2.2 and 2.0.x prior to 2.0.1 doesn't seem t...
Apache Hive 0.13.0Apache Hive 0.13.1Apache Hive 0.14.0Apache Hive 1.0.0Apache Hive 1.0.1Apache Hive 1.1.0Apache Hive 1.1.1Apache Hive 1.2.0Apache Hive 1.2.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
injectCVE-2024-44852CVE-2024-3400CVE-2024-30129insecure direct object referenceCVE-2024-12115CVE-2024-11220CVE-2024-51378privilege escalation
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook