Apache: >> Http Server Security Vulnerabilities
Apache allows remote attackers to conduct a denial of service via a large number of MIME headers.
CVSS Score
10.0
EPSS Score
0.046
Published
1999-09-03
Vulnerability in Apache httpd before 1.3.11, when configured for mass virtual hosting using mod_rewrite, or mod_vhost_alias in Apache 1.3.9, allows remote attackers to retrieve arbitrary files.
CVSS Score
5.0
EPSS Score
0.03
Published
1999-08-20
Multiple buffer overflows in smbvalid/smbval SMB authentication library, as used in Apache::AuthenSmb and possibly other modules, allows remote attackers to execute arbitrary commands via (1) a long username, (2) a long password, and (3) other unspecified methods.
CVSS Score
10.0
EPSS Score
0.004
Published
1999-06-06
A possible interaction between Apple MacOS X release 1.0 and Apache HTTP server allows remote attackers to cause a denial of service (crash) via a flood of HTTP GET requests to CGI programs, which generates a large number of processes.
CVSS Score
5.0
EPSS Score
0.138
Published
1999-06-03
A default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /usr/doc, which allows remote users to read documentation files for the entire server.
CVSS Score
5.0
EPSS Score
0.172
Published
1999-01-17
Apache WWW server 1.3.1 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via a large number of MIME headers with the same name, aka the "sioux" vulnerability.
CVSS Score
10.0
EPSS Score
0.055
Published
1998-08-07
Buffer overflow in Apache 1.2.5 and earlier allows a remote attacker to cause a denial of service with a large number of GET requests containing a large number of / characters.
CVSS Score
5.0
EPSS Score
0.12
Published
1997-12-30
Apache httpd cookie buffer overflow for versions 1.1.1 and earlier.
CVSS Score
7.5
EPSS Score
0.021
Published
1997-09-01
ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs.
CVSS Score
7.5
EPSS Score
0.092
Published
1997-01-01
List of arbitrary files on Web host via nph-test-cgi script.
CVSS Score
7.5
EPSS Score
0.098
Published
1996-12-10