Apache

HTTP Server

306 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2002-0257

  • EPSS 6.65%
  • Veröffentlicht 29.05.2002 04:00:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Cross-site scripting vulnerability in auction.pl of MakeBid Auction Deluxe 3.30 allows remote attackers to obtain information from other users via the form fields (1) TITLE, (2) DESCTIT, (3) DESC, (4) searchstring, (5) ALIAS, (6) EMAIL, (7) ADDRESS1,...

5

CVE-2002-1592

  • EPSS 5.14%
  • Veröffentlicht 06.05.2002 04:00:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

The ap_log_rerror function in Apache 2.0 through 2.035, when a CGI application encounters an error, sends error messages to the client that include the full path for the server, which allows remote attackers to obtain sensitive information.

7.5

CVE-2002-0061

  • EPSS 89.02%
  • Veröffentlicht 21.03.2002 05:00:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Apache for Win32 before 1.3.24, and 2.0.x before 2.0.34-beta, allows remote attackers to execute arbitrary commands via shell metacharacters (a | pipe character) provided as arguments to batch (.bat) or .cmd scripts, which are sent unfiltered to the ...

2.1

CVE-2001-1534

  • EPSS 0.09%
  • Veröffentlicht 31.12.2001 05:00:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

mod_usertrack in Apache 1.3.11 through 1.3.20 generates session ID's using predictable information including host IP address, system time and server process ID, which allows local users to obtain session ID's and bypass authentication when these sess...

5

CVE-2001-1556

  • EPSS 1.77%
  • Veröffentlicht 31.12.2001 05:00:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

The log files in Apache web server contain information directly supplied by clients and does not filter or quote control characters, which could allow remote attackers to hide HTTP requests and spoof source IP addresses when logs are viewed with UNIX...

7.5

CVE-2001-1449

  • EPSS 5.43%
  • Veröffentlicht 28.11.2001 05:00:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

The default installation of Apache before 1.3.19 on Mandrake Linux 7.1 through 8.0 and Linux Corporate Server 1.0.1 allows remote attackers to list the directory index of arbitrary web directories.

5

CVE-2001-0729

  • EPSS 2.31%
  • Veröffentlicht 30.10.2001 05:00:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Apache 1.3.20 on Windows servers allows remote attackers to bypass the default index page and list directory contents via a URL with a large number of / (slash) characters.

5

CVE-2001-0730

  • EPSS 7.8%
  • Veröffentlicht 30.10.2001 05:00:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

split-logfile in Apache 1.3.20 allows remote attackers to overwrite arbitrary files that end in the .log extension via an HTTP request with a / (slash) in the Host: header.

9.8

CVE-2001-0766

Exploit
  • EPSS 11.23%
  • Veröffentlicht 18.10.2001 04:00:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Apache on MacOS X Client 10.0.3 with the HFS+ file system allows remote attackers to bypass access restrictions via a URL that contains some characters whose case is not matched by Apache's filters.

5

CVE-2001-0731

  • EPSS 80.79%
  • Veröffentlicht 01.10.2001 04:00:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Apache 1.3.20 with Multiviews enabled allows remote attackers to view directory contents and bypass the index page via a URL containing the "M=D" query string.