Skip to content

apache2 vulnerabilities (Debian)

274 vulnerabilities.

apache2 Debian** DISPUTED ** The mod_php module for the Apache HTTP Server allows local users with write...CVE-2003-1307Public exploitDisputed4.3 MediumDecember 31, 2003
apache2 Debianmod_cgid in Apache before 2.0.48, when using a threaded MPM, does not properly handle CGI...CVE-2003-0789Fix availableEPSS 12.4%10.0 HighOctober 30, 2003
apache2 DebianMultiple stack-based buffer overflows in (1) mod_alias and (2) mod_rewrite for Apache before 1.3...CVE-2003-0542Fix availableEPSS 30.4%7.2 HighOctober 30, 2003
apache2 DebianApache 2 before 2.0.47, when running on an IPv6 host, allows attackers to cause a denial of...CVE-2003-0254Fix available5.0 MediumJuly 10, 2003
apache2 DebianThe prefork MPM in Apache 2 before 2.0.47 does not properly handle certain errors from accept,...CVE-2003-0253Fix available5.0 MediumJuly 10, 2003
apache2 DebianApache 2 before 2.0.47, and certain versions of mod_ssl for Apache 1.3, do not properly handle ...CVE-2003-0192Fix available6.4 MediumJuly 10, 2003
apache2 DebianVulnerability in the apr_psprintf function in the Apache Portable Runtime (APR) library for...CVE-2003-0245Public exploitFix availableEPSS 63.5%5.0 MediumMay 30, 2003
apache2 DebianThe authentication module for Apache 2.0.40 through 2.0.45 on Unix does not properly handle...CVE-2003-0189Fix availableEPSS 15.1%5.0 MediumMay 30, 2003
apache2 DebianUnknown vulnerability in filestat.c for Apache running on OS2, versions 2.0 through 2.0.45,...CVE-2003-0134Fix available5.0 MediumApril 3, 2003
apache2 DebianA memory leak in Apache 2.0 through 2.0.44 allows remote attackers to cause a denial of service ...CVE-2003-0132Public exploitFix availableEPSS 87.1%5.0 MediumApril 3, 2003
apache2 DebianApache 1.3 before 1.3.25 and Apache 2.0 before version 2.0.46 does not filter terminal escape...CVE-2003-0083Fix availableEPSS 19.2%5.0 MediumMarch 28, 2003
apache2 DebianApache does not filter terminal escape sequences from its error logs, which could make it easier...CVE-2003-0020Fix availableEPSS 16.5%5.0 MediumMarch 18, 2003
apache2 Debianmod_cgi in Apache 2.0.39 and 2.0.40 allows local users and possibly remote attackers to cause a...CVE-2002-1850Public exploitFix availableEPSS 17.4%7.5 HighDecember 31, 2002
apache2 DebianApache 2.0.42 allows remote attackers to view the source code of a CGI script via a POST request...CVE-2002-1156Fix availableEPSS 14.9%5.0 MediumOctober 11, 2002
apache2 DebianCross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43,...CVE-2002-0840Public exploitFix availableEPSS 95.1%6.8 MediumOctober 11, 2002
apache2 Debianmod_dav in Apache before 2.0.42 does not properly handle versioning hooks, which may allow remote...CVE-2002-1593Fix available5.0 MediumSeptember 25, 2002
apache2 DebianApache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to determine the...CVE-2002-0654Public exploitFix availableEPSS 58.7%5.0 MediumAugust 20, 2002
apache2 DebianDirectory traversal vulnerability in Apache 2.0 through 2.0.39 on Windows, OS2, and Netware...CVE-2002-0661Public exploitFix availableEPSS 69.7%7.5 HighAugust 10, 2002
apache2 DebianApache 1.3 through 1.3.24, and Apache 2.0 through 2.0.36, allows remote attackers to cause a...CVE-2002-0392Public exploitFix availableEPSS 95.2%7.5 HighJuly 3, 2002
apache2 DebianThe ap_log_rerror function in Apache 2.0 through 2.035, when a CGI application encounters an...CVE-2002-1592Fix availableEPSS 12.5%5.0 MediumMay 6, 2002
apache2 Debianmod_usertrack in Apache 1.3.11 through 1.3.20 generates session ID's using predictable...CVE-2001-15342.1 LowDecember 31, 2001