apache2 vulnerabilities (Debian)
274 vulnerabilities.
apache2DebianThe ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the...2.6 Lowapache2DebianThe mod_deflate module in Apache httpd 2.2.11 and earlier compresses large files until completion...7.1 Highapache2DebianThe stream_reqbody_cl function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP...7.1 Highapache2DebianThe Apache HTTP Server 2.2.11 and earlier 2.2 versions does not properly handle Options...4.9 Mediumapache2Debianmod_proxy_ajp.c in the mod_proxy_ajp module in the Apache HTTP Server 2.2.11 allows remote...5.0 Mediumapache2DebianCross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Apache 2.0...4.3 Mediumapache2DebianThe ap_proxy_http_process_response function in mod_proxy_http.c in the mod_proxy module in the...5.0 Mediumapache2DebianMemory leak in the zlib_stateful_init function in crypto/comp/c_zlib.c in libssl in OpenSSL 0.9...5.0 Mediumapache2DebianCross-site scripting (XSS) vulnerability in Apache 2.2.6 and earlier allows remote attackers to...4.3 Mediumapache2DebianCRLF injection vulnerability in the mod_negotiation module in the Apache HTTP Server 2.2.6 and...2.6 Lowapache2DebianCross-site scripting (XSS) vulnerability in the mod_negotiation module in the Apache HTTP Server...4.3 Mediumapache2Debianmod_proxy_ftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before 2.0.62-dev, and 1.3.x before 1.3.40...4.3 Mediumapache2DebianCross-site request forgery (CSRF) vulnerability in the balancer-manager in mod_proxy_balancer for...4.3 Mediumapache2DebianCross-site scripting (XSS) vulnerability in balancer-manager in mod_proxy_balancer in the Apache...3.5 Lowapache2DebianThe balancer_handler function in mod_proxy_balancer in the Apache HTTP Server 2.2.0 through 2.2.6...4.0 Mediumapache2DebianCross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2...4.3 Mediumapache2DebianCross-site scripting (XSS) vulnerability in the (1) mod_imap module in the Apache HTTP Server 1.3...4.3 Mediumapache2DebianApache HTTP Server 2.0.x and 2.2.x does not sanitize the HTTP Method specifier header from an...4.3 Mediumapache2DebianCross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2...4.3 Mediumapache2DebianThe date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when using a...5.0 Mediumapache2Debiancache_util.c in the mod_cache module in Apache HTTP Server (httpd), when caching is enabled and a...5.0 Mediumapache2DebianCross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apache HTTP...4.3 Mediumapache2DebianApache httpd 1.3.37, 2.0.59, and 2.2.4 with the Prefork MPM module, allows local users to cause a...4.7 Mediumapache2DebianApache httpd 2.0.59 and 2.2.4, with the Prefork MPM module, allows local users to cause a denial...4.9 Mediumapache2Debiansuexec in Apache HTTP Server (httpd) 2.2.3 does not verify combinations of user and group IDs on...4.4 Mediumapache2Debiansuexec in Apache HTTP Server (httpd) 2.2.3 uses a partial comparison for verifying whether the...3.7 Lowapache2DebianMultiple race conditions in suexec in Apache HTTP Server (httpd) 2.2.3 between directory and file...6.2 Mediumapache2Debian** DISPUTED ** The Apache HTTP Server, when accessed through a TCP connection with a large...7.8 Highapache2DebianOff-by-one error in the ldap scheme handling in the Rewrite module (mod_rewrite) in Apache 1.3...7.6 Highapache2Debianhttp_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache...4.3 Mediumapache2Debianmod_ssl in Apache 2.0 up to 2.0.55, when configured with an SSL vhost with access control and a...5.4 Mediumapache2DebianCross-site scripting (XSS) vulnerability in the mod_imap module of Apache httpd before 1.3.35-dev...4.3 Mediumapache2DebianMemory leak in the worker MPM (worker.c) for Apache 2, in certain circumstances, allows remote...5.0 Mediumapache2Debianssl_engine_kernel.c in mod_ssl before 2.8.24, when using "SSLVerifyClient optional" in the global...10.0 Highapache2DebianThe byte-range filter in Apache 2.0 before 2.0.54 allows remote attackers to cause a denial of...5.0 Mediumapache2DebianOff-by-one error in the mod_ssl Certificate Revocation List (CRL) verification callback in Apache...5.0 Mediumapache2DebianThe Apache HTTP server before 1.3.34, and 2.0.x before 2.0.55, when acting as an HTTP proxy,...4.3 Mediumapache2DebianBuffer overflow in htdigest in Apache 2.0.52 may allow attackers to execute arbitrary code via a...7.5 Highapache2DebianApache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service (CPU...5.0 Mediumapache2DebianThe mod_ssl module in Apache 2.0.35 through 2.0.52, when using the "SSLCipherSuite" directive in...7.5 Highapache2DebianUnknown vulnerability in Apache 2.0.51 prevents "the merging of the Satisfy directive," which...7.5 Highapache2DebianThe IPv6 URI parsing routines in the apr-util library for Apache 2.0.50 and earlier allow remote...5.0 Mediumapache2DebianBuffer overflow in Apache 2.0.50 and earlier allows local users to gain apache privileges via a ...7.8 Highapache2DebianThe mod_dav module in Apache 2.0.50 and earlier allows remote attackers to cause a denial of...5.0 Mediumapache2DebianThe char_buffer_read function in the mod_ssl module for Apache 2.x, when using reverse proxying...5.0 Mediumapache2Debianmod_ssl in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (CPU...5.0 Mediumapache2DebianThe ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a...6.4 Mediumapache2DebianStack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache...7.5 Highapache2DebianMemory leak in ssl_engine_io.c for mod_ssl in Apache 2 before 2.0.49 allows remote attackers to...5.0 Mediumapache2Debianmod_disk_cache in Apache 2.0 through 2.0.49 stores client headers, including authentication...2.1 Low- Show moreLoading…