apache http server 1.2.5 vulnerabilities and exploits

(subscribe to this query)

Apache allows remote malicious users to conduct a denial of service via a large number of MIME headers.

Apache Http Server 1.2.5

1 EDB exploit

Buffer overflow in Apache 1.2.5 and previous versions allows a remote malicious user to cause a denial of service with a large number of GET requests containing a large number of / characters.

Apache Http Server 0.8.11 Apache Http Server 0.8.14 Apache Http Server 1.0 Apache Http Server 1.0.2 Apache Http Server 1.0.3 Apache Http Server 1.0.5 Apache Http Server 1.1 Apache Http Server 1.1.1 Apache Http Server 1.2.5

1 EDB exploit

Directory traversal vulnerability in Apache 1.3.29 and previous versions, and Apache 2.0.48 and previous versions, when running on Cygwin, allows remote malicious users to read arbitrary files via a URL containing "..%5C" (dot dot encoded backslash) sequences.

Apache Http Server 0.8.11 Apache Http Server 0.8.14 Apache Http Server 1.0 Apache Http Server 1.0.2 Apache Http Server 1.0.3 Apache Http Server 1.0.5 Apache Http Server 1.1 Apache Http Server 1.1.1 Apache Http Server 1.2 Apache Http Server 1.2.5 Apache Http Server 1.3

1 EDB exploit

Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c in mod_proxy in the Apache HTTP Server prior to 1.3.42 on 64-bit platforms allows remote origin servers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a large chunk size th...

Apache Http Server Apache Http Server 0.8.11 Apache Http Server 0.8.14 Apache Http Server 1.0 Apache Http Server 1.0.3 Apache Http Server 1.0.5 Apache Http Server 1.1 Apache Http Server 1.2 Apache Http Server 1.2.4 Apache Http Server 1.2.5 Apache Http Server 1.2.6 Apache Http Server 1.3

PHP 4.3.4 and previous versions in Apache 1.x and 2.x (mod_php) can leak global variables between virtual hosts that are handled by the same Apache child process but have different settings, which could allow remote malicious users to obtain sensitive information.

Apache Http Server 1.0 Apache Http Server 1.0.2 Apache Http Server 1.0.3 Apache Http Server 1.0.5 Apache Http Server 1.1 Apache Http Server 1.1.1 Apache Http Server 1.2 Apache Http Server 1.2.5 Apache Http Server 1.3 Apache Http Server 1.3.1 Apache Http Server 1.3.3 Apache Http Server 1.3.4

The Apache HTTP Server 1.x and 2.x allows remote malicious users to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris, related to the lack of the mod_reqtimeout module in versions prior to 2.2.15.

Apache Http Server Apache Http Server 1.0 Apache Http Server 1.0.2 Apache Http Server 1.0.3 Apache Http Server 1.0.5 Apache Http Server 1.1 Apache Http Server 1.1.1 Apache Http Server 1.2 Apache Http Server 1.2.4 Apache Http Server 1.2.5 Apache Http Server 1.2.6 Apache Http Server 1.2.9

1 Nmap script12 Github repositories

mod_proxy in Apache 1.2.5 and previous versions allows remote malicious users to cause a denial of service via malformed FTP commands, which causes Apache to dump core.

Apache Http Server

mod_jk in Apache Tomcat JK Web Server Connector 1.2.x prior to 1.2.23 decodes request URLs within the Apache HTTP Server before passing the URL to Tomcat, which allows remote malicious users to access protected pages via a crafted prefix JkMount, possibly involving double-encoded...

Apache Tomcat Jk Web Server Connector

3 Github repositories

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook