Skip to content

httpd vulnerabilities (Red Hat)

274 vulnerabilities.

httpd Red HatThe date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when using a...CVE-2007-3847Fix availableEPSS 12.9%5.0 MediumAugust 23, 2007
httpd Red Hatcache_util.c in the mod_cache module in Apache HTTP Server (httpd), when caching is enabled and a...CVE-2007-1863Fix availableEPSS 11.8%5.0 MediumJune 27, 2007
httpd Red HatCross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apache HTTP...CVE-2006-5752Fix availableEPSS 27.8%4.3 MediumJune 27, 2007
httpd Red HatApache httpd 1.3.37, 2.0.59, and 2.2.4 with the Prefork MPM module, allows local users to cause a...CVE-2007-3304Fix available4.7 MediumJune 20, 2007
httpd Red Hathttp_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache...CVE-2006-3918Public exploitFix availableEPSS 95.1%4.3 MediumJuly 28, 2006
httpd Red Hatmod_ssl in Apache 2.0 up to 2.0.55, when configured with an SSL vhost with access control and a...CVE-2005-3357Fix availableEPSS 24.3%5.4 MediumDecember 31, 2005
httpd Red HatCross-site scripting (XSS) vulnerability in the mod_imap module of Apache httpd before 1.3.35-dev...CVE-2005-3352Fix availableEPSS 73.7%4.3 MediumDecember 13, 2005
httpd Red HatMemory leak in the worker MPM (worker.c) for Apache 2, in certain circumstances, allows remote...CVE-2005-2970Fix availableEPSS 14.2%5.0 MediumOctober 25, 2005
httpd Red Hatssl_engine_kernel.c in mod_ssl before 2.8.24, when using "SSLVerifyClient optional" in the global...CVE-2005-2700Fix availableEPSS 30.6%10.0 HighSeptember 6, 2005
httpd Red HatThe byte-range filter in Apache 2.0 before 2.0.54 allows remote attackers to cause a denial of...CVE-2005-2728Fix availableEPSS 11.0%5.0 MediumAugust 29, 2005
httpd Red HatOff-by-one error in the mod_ssl Certificate Revocation List (CRL) verification callback in Apache...CVE-2005-1268Fix available5.0 MediumAugust 5, 2005
httpd Red HatThe Apache HTTP server before 1.3.34, and 2.0.x before 2.0.55, when acting as an HTTP proxy,...CVE-2005-2088Fix availableEPSS 20.5%4.3 MediumJune 30, 2005
httpd Red HatApache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service (CPU...CVE-2004-0942Public exploitFix availableEPSS 58.7%5.0 MediumNovember 4, 2004
httpd Red HatThe mod_ssl module in Apache 2.0.35 through 2.0.52, when using the "SSLCipherSuite" directive in...CVE-2004-0885Fix availableEPSS 15.4%7.5 HighOctober 16, 2004
httpd Red HatThe IPv6 URI parsing routines in the apr-util library for Apache 2.0.50 and earlier allow remote...CVE-2004-0786Fix availableEPSS 24.1%5.0 MediumSeptember 17, 2004
httpd Red HatBuffer overflow in Apache 2.0.50 and earlier allows local users to gain apache privileges via a ...CVE-2004-0747Fix available7.8 HighSeptember 17, 2004
httpd Red HatThe mod_dav module in Apache 2.0.50 and earlier allows remote attackers to cause a denial of...CVE-2004-0809Fix availableEPSS 17.2%5.0 MediumSeptember 16, 2004
httpd Red HatThe char_buffer_read function in the mod_ssl module for Apache 2.x, when using reverse proxying...CVE-2004-0751Public exploitFix availableEPSS 72.3%5.0 MediumSeptember 10, 2004
httpd Red Hatmod_ssl in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (CPU...CVE-2004-0748Fix availableEPSS 24.7%5.0 MediumSeptember 10, 2004
httpd Red HatThe ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a...CVE-2004-0493Public exploitFix availableEPSS 84.8%6.4 MediumJune 30, 2004
httpd Red HatStack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache...CVE-2004-0488Fix availableEPSS 37.7%7.5 HighMay 28, 2004
httpd Red HatMemory leak in ssl_engine_io.c for mod_ssl in Apache 2 before 2.0.49 allows remote attackers to...CVE-2004-0113Fix availableEPSS 11.0%5.0 MediumMarch 29, 2004
httpd Red Hatmod_disk_cache in Apache 2.0 through 2.0.49 stores client headers, including authentication...CVE-2004-1834Fix available2.1 LowMarch 20, 2004
httpd Red HatMultiple stack-based buffer overflows in (1) mod_alias and (2) mod_rewrite for Apache before 1.3...CVE-2003-0542Fix availableEPSS 30.4%7.2 HighOctober 30, 2003