Apache : Security Vulnerabilities (CVSS score between 7 and 7.99)

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : Cve Number Descending Cve Number Ascending CVSS Score Descending Number Of Exploits Descending

Copy Results Download Results Select Table

#	CVE ID	CWE ID	# of Exploits	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2012-3376	310			2012-07-12	2012-07-16	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
DataNodes in Apache Hadoop 2.0.0 alpha does not check the BlockTokens of clients when Kerberos is enabled and the DataNode has checked out the same BlockPool twice from a NodeName, which might allow remote clients to read arbitrary blocks, write to blocks to which they only have read access, and have other unspecified impacts.
2	CVE-2012-2149	189	1	Exec Code Overflow	2012-06-21	2012-10-30	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The WPXContentListener::_closeTableRow function in WPXContentListener.cpp in libwpd 0.8.8, as used by OpenOffice.org (OOo) before 3.4, allows remote attackers to execute arbitrary code via a crafted Wordperfect .WPD document that causes a negative array index to be used. NOTE: some sources report this issue as an integer overflow.
3	CVE-2012-1149	189		DoS Exec Code Overflow	2012-06-21	2013-04-18	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Integer overflow in the vclmi.dll module in OpenOffice.org (OOo) 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted embedded image object, as demonstrated by a JPEG image in a .DOC file, which triggers a heap-based buffer overflow.
4	CVE-2012-0838	20		Exec Code	2012-03-02	2012-03-05	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Apache Struts 2 before 2.2.3.1 evaluates a string as an OGNL expression during the handling of a conversion error, which allows remote attackers to modify run-time data values, and consequently execute arbitrary code, via invalid input to a field.
5	CVE-2011-5034	20		DoS	2011-12-29	2012-11-06	7.8	None	Remote	Low	Not required	None	None	Complete
Apache Geronimo 2.2.1 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters. NOTE: this might overlap CVE-2011-4461.
6	CVE-2011-3620	287			2012-05-03	2012-08-13	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Apache Qpid 0.12 does not properly verify credentials during the joining of a cluster, which allows remote attackers to obtain access to the messaging functionality and job functionality of a cluster by leveraging knowledge of a cluster-username.
7	CVE-2011-3192	399	1	DoS	2011-08-29	2012-10-29	7.8	None	Remote	Low	Not required	None	None	Complete
The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memory and CPU consumption) via a Range header that expresses multiple overlapping ranges, as exploited in the wild in August 2011, a different vulnerability than CVE-2007-0086.
8	CVE-2011-3190	264		Bypass +Info	2011-08-31	2012-11-06	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Certain AJP protocol connector implementations in Apache Tomcat 7.0.0 through 7.0.20, 6.0.0 through 6.0.33, 5.5.0 through 5.5.33, and possibly other versions allow remote attackers to spoof AJP requests, bypass authentication, and obtain sensitive information by causing the connector to interpret a request body as a new request.
9	CVE-2010-3872	189			2010-11-22	2012-03-20	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The fcgid_header_bucket_read function in fcgid_bucket.c in the mod_fcgid module before 2.3.6 for the Apache HTTP Server does not use bytewise pointer arithmetic in certain circumstances, which has unspecified impact and attack vectors related to "untrusted FastCGI applications" and a "stack buffer overwrite."
10	CVE-2010-2076	20		DoS	2010-08-19	2010-08-25	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Apache CXF 2.0.x before 2.0.13, 2.1.x before 2.1.10, and 2.2.x before 2.2.9, as used in Apache ServiceMix, Apache Camel, Apache Chemistry, Apache jUDDI, Apache Geronimo, and other products, does not properly reject DTDs in SOAP messages, which allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via a crafted DTD, as demonstrated by an entity declaration in a request to samples/wsdl_first_pure_xml, a similar issue to CVE-2010-1632.
11	CVE-2010-1632	20		DoS	2010-06-22	2010-08-21	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Apache Axis2 before 1.5.2, as used in IBM WebSphere Application Server (WAS) 7.0 through 7.0.0.12, IBM Feature Pack for Web Services 6.1.0.9 through 6.1.0.32, IBM Feature Pack for Web 2.0 1.0.1.0, Apache Synapse, Apache ODE, Apache Tuscany, Apache Geronimo, and other products, does not properly reject DTDs in SOAP messages, which allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via a crafted DTD, as demonstrated by an entity declaration in a request to the Synapse SimpleStockQuoteService.
12	CVE-2009-3548	255		+Priv	2009-11-12	2011-07-18	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
The Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly earlier versions uses a blank default password for the administrative user, which allows remote attackers to gain privileges.
13	CVE-2009-3095	264		Bypass	2009-09-08	2011-09-06	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the Authorization HTTP header, as demonstrated by a certain module in VulnDisco Pack Professional 8.11.
14	CVE-2009-1955	399	1	DoS	2009-06-07	2013-04-17	7.8	None	Remote	Low	Not required	None	None	Complete
The expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7, as used in the mod_dav and mod_dav_svn modules in the Apache HTTP Server, allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document containing a large number of nested entity references, as demonstrated by a PROPFIND request, a similar issue to CVE-2003-1564.
15	CVE-2009-1891	399		DoS	2009-07-10	2011-09-06	7.1	None	Remote	Medium	Not required	None	None	Complete
The mod_deflate module in Apache httpd 2.2.11 and earlier compresses large files until completion even after the associated network connection is closed, which allows remote attackers to cause a denial of service (CPU consumption).
16	CVE-2009-1890	189		DoS	2009-07-05	2013-04-17	7.1	None	Remote	Medium	Not required	None	None	Complete
The stream_reqbody_cl function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server before 2.3.3, when a reverse proxy is configured, does not properly handle an amount of streamed data that exceeds the Content-Length value, which allows remote attackers to cause a denial of service (CPU consumption) via crafted requests.
17	CVE-2008-4482	20		DoS	2008-10-07	2009-08-19	7.8	None	Remote	Low	Not required	None	None	Complete
The XML parser in Xerces-C++ before 3.0.0 allows context-dependent attackers to cause a denial of service (stack consumption and crash) via an XML schema definition with a large maxOccurs value, which triggers excessive memory consumption during validation of an XML file.
18	CVE-2007-6423	399		Mem. Corr.	2008-01-11	2008-09-05	7.8	None	Remote	Low	Not required	None	None	Complete
DISPUTED Unspecified vulnerability in mod_proxy_balancer for Apache HTTP Server 2.2.x before 2.2.7-dev, when running on Windows, allows remote attackers to trigger memory corruption via a long URL. NOTE: the vendor could not reproduce this issue.
19	CVE-2007-5797	287		Bypass	2007-11-02	2008-11-15	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
SQLLoginModule in Apache Geronimo 2.0 through 2.1 does not throw an exception for a nonexistent username, which allows remote attackers to bypass authentication via a login attempt with any username not contained in the database.
20	CVE-2007-4723	22		Dir. Trav. Bypass	2007-09-05	2008-11-15	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Directory traversal vulnerability in Ragnarok Online Control Panel 4.3.4a, when the Apache HTTP Server is used, allows remote attackers to bypass authentication via directory traversal sequences in a URI that ends with the name of a publicly available page, as demonstrated by a "/...../" sequence and an account_manage.php/login.php final component for reaching the protected account_manage.php page.
21	CVE-2007-0774			Exec Code Overflow	2007-03-04	2009-03-04	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
Stack-based buffer overflow in the map_uri_to_worker function (native/common/jk_uri_worker_map.c) in mod_jk.so for Apache Tomcat JK Web Server Connector 1.2.19 and 1.2.20, as used in Tomcat 4.1.34 and 5.5.20, allows remote attackers to execute arbitrary code via a long URL that triggers the overflow in a URI worker map routine.
22	CVE-2007-0086			DoS	2007-01-05	2008-11-15	7.8	None	Remote	Low	Not required	None	None	Complete
DISPUTED The Apache HTTP Server, when accessed through a TCP connection with a large window size, allows remote attackers to cause a denial of service (network bandwidth consumption) via a Range header that specifies multiple copies of the same fragment. NOTE: the severity of this issue has been disputed by third parties, who state that the large window size required by the attack is not normally supported or configured by the server, or that a DDoS-style attack would accomplish the same goal.
23	CVE-2006-7197				2007-04-25	2008-09-05	7.8	None	Remote	Low	Not required	Complete	None	None
The AJP connector in Apache Tomcat 5.5.15 uses an incorrect length for chunks, which can cause a buffer over-read in the ajp_process_callback in mod_jk, which allows remote attackers to read portions of sensitive memory.
24	CVE-2006-6588				2006-12-15	2008-09-05	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
The forum implementation in the ecommerce component in the Apache Open For Business Project (OFBiz) trusts the (1) dataResourceTypeId, (2) contentTypeId, and certain other hidden form fields, which allows remote attackers to create unauthorized types of content, modify content, or have other unknown impact.
25	CVE-2006-3747	189		DoS Exec Code	2006-07-28	2011-09-06	7.6	Admin	Remote	High	Not required	Complete	Complete	Complete
Off-by-one error in the ldap scheme handling in the Rewrite module (mod_rewrite) in Apache 1.3 from 1.3.28, 2.0.46 and other versions before 2.0.59, and 2.2, when RewriteEngine is enabled, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted URLs that are not properly handled using certain rewrite rules.
26	CVE-2006-2806			DoS	2006-06-05	2008-09-05	7.8	None	Remote	Low	Not required	None	None	Complete
The SMTP server in Apache Java Mail Enterprise Server (aka Apache James) 2.2.0 allows remote attackers to cause a denial of service (CPU consumption) via a long argument to the MAIL command.
27	CVE-2006-1547			DoS	2006-03-30	2008-09-05	7.8	None	Remote	Low	Not required	None	None	Complete
ActionForm in Apache Software Foundation (ASF) Struts before 1.2.9 with BeanUtils 1.7 allows remote attackers to cause a denial of service via a multipart/form-data encoded form with a parameter name that references the public getMultipartRequestHandler method, which provides further access to elements in the CommonsMultipartRequestHandler implementation and BeanUtils.
28	CVE-2006-1546			Bypass	2006-03-30	2008-09-05	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
Apache Software Foundation (ASF) Struts before 1.2.9 allows remote attackers to bypass validation via a request with a 'org.apache.struts.taglib.html.Constants.CANCEL' parameter, which causes the action to be canceled but would not be detected from applications that do not use the isCancelled check.
29	CVE-2006-1095	22		Exec Code Dir. Trav.	2006-03-09	2011-04-01	7.2	Admin	Local	Low	Not required	Complete	Complete	Complete
Directory traversal vulnerability in the FileSession object in Mod_python module 3.2.7 for Apache allows local users to execute arbitrary code via a crafted session cookie.
30	CVE-2005-4836	200		+Info	2005-12-31	2012-02-09	7.8	None	Remote	Low	Not required	Complete	None	None
The HTTP/1.1 connector in Apache Tomcat 4.1.15 through 4.1.40 does not reject NULL bytes in a URL when allowLinking is configured, which allows remote attackers to read JSP source files and obtain sensitive information.
31	CVE-2005-1344			Exec Code Overflow	2005-05-02	2008-09-10	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Buffer overflow in htdigest in Apache 2.0.52 may allow attackers to execute arbitrary code via a long realm argument. NOTE: since htdigest is normally only locally accessible and not setuid or setgid, there are few attack vectors which would lead to an escalation of privileges, unless htdigest is executed from a CGI program. Therefore this may not be a vulnerability.
32	CVE-2005-0088				2005-05-02	2010-08-21	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
The publisher handler for mod_python 2.7.8 and earlier allows remote attackers to obtain access to restricted objects via a crafted URL.
33	CVE-2004-2343			Bypass	2004-12-31	2008-09-05	7.2	Admin	Local	Low	Not required	Complete	Complete	Complete
DISPUTED Apache HTTP Server 2.0.47 and earlier allows local users to bypass .htaccess file restrictions, as specified in httpd.conf with directives such as Deny From All, by using an ErrorDocument directive. NOTE: the vendor has disputed this issue, since the .htaccess mechanism is only intended to restrict external web access, and a local user already has the privileges to perform the same operations without using ErrorDocument.
34	CVE-2004-1082				2004-02-03	2008-09-05	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials.
35	CVE-2004-0885			Bypass	2004-11-03	2010-08-21	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
The mod_ssl module in Apache 2.0.35 through 2.0.52, when using the "SSLCipherSuite" directive in directory or location context, allows remote clients to bypass intended restrictions by using any cipher suite that is allowed by the virtual host configuration.
36	CVE-2004-0811				2004-12-31	2008-09-05	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
Unknown vulnerability in Apache 2.0.51 prevents "the merging of the Satisfy directive," which could allow attackers to obtain access to restricted resources contrary to the specified authentication configuration.
37	CVE-2004-0488			Exec Code Overflow	2004-07-07	2010-08-21	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN.
38	CVE-2003-0993			Bypass	2004-03-29	2008-09-10	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
mod_access in Apache 1.3 before 1.3.30, when running big-endian 64-bit platforms, does not properly parse Allow/Deny rules using IP addresses without a netmask, which could allow remote attackers to bypass intended access restrictions.
39	CVE-2003-0987				2004-03-03	2008-09-10	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
mod_digest for Apache before 1.3.31 does not properly verify the nonce of a client response by using a AuthNonce secret.
40	CVE-2003-0542	119		DoS Exec Code Overflow	2003-11-03	2011-09-06	7.2	Admin	Local	Low	Not required	Complete	Complete	Complete
Multiple stack-based buffer overflows in (1) mod_alias and (2) mod_rewrite for Apache before 1.3.29 allow attackers to create configuration files to cause a denial of service (crash) or execute arbitrary code via a regular expression with more than 9 captures.
41	CVE-2003-0016			DoS Exec Code	2003-02-07	2008-09-10	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
Apache before 2.0.44, when running on unpatched Windows 9x and Me operating systems, allows remote attackers to cause a denial of service or execute arbitrary code via an HTTP request containing MS-DOS device names.
42	CVE-2002-2272	119		DoS Overflow	2002-12-31	2008-09-05	7.8	None	Remote	Low	Not required	None	None	Complete
Tomcat 4.0 through 4.1.12, using mod_jk 1.2.1 module on Apache 1.3 through 1.3.27, allows remote attackers to cause a denial of service (desynchronized communications) via an HTTP GET request with a Transfer-Encoding chunked field with invalid values.
43	CVE-2002-2029				2002-12-31	2008-09-05	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
PHP, when installed on Windows with Apache and ScriptAlias for /php/ set to c:/php/, allows remote attackers to read arbitrary files and possibly execute arbitrary programs via an HTTP request for php.exe with a filename in the query string.
44	CVE-2002-1394			Bypass	2003-01-17	2008-09-10	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
Apache Tomcat 4.0.5 and earlier, when using both the invoker servlet and the default servlet, allows remote attackers to read source code for server files or bypass certain protections, a variant of CAN-2002-1148.
45	CVE-2002-0843			DoS Exec Code Overflow	2002-10-11	2008-09-10	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
Buffer overflows in the ApacheBench benchmark support program (ab.c) in Apache before 1.3.27, and Apache 2.x before 2.0.43, allow a malicious web server to cause a denial of service and possibly execute arbitrary code via a long response.
46	CVE-2002-0839			DoS	2002-10-11	2011-09-06	7.2	Admin	Local	Low	Not required	Complete	Complete	Complete
The shared memory scoreboard in the HTTP daemon for Apache 1.3.x before 1.3.27 allows any user running as the Apache UID to send a SIGUSR1 signal to any process as root, resulting in a denial of service (process kill) or possibly other behaviors that would not normally be allowed, by modifying the parent[].pid and parent[].last_rtime segments in the scoreboard.
47	CVE-2002-0682			XSS	2002-07-23	2008-09-05	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
Cross-site scripting vulnerability in Apache Tomcat 4.0.3 allows remote attackers to execute script as other web users via script in a URL with the /servlet/ mapping, which does not filter the script when an exception is thrown by the servlet.
48	CVE-2002-0661			Exec Code Dir. Trav.	2002-08-12	2008-09-10	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
Directory traversal vulnerability in Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to read arbitrary files and execute commands via .. (dot dot) sequences containing \ (backslash) characters.
49	CVE-2002-0493			Bypass	2002-08-12	2008-09-05	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
Apache Tomcat may be started without proper security settings if errors are encountered while reading the web.xml file, which could allow attackers to bypass intended restrictions.
50	CVE-2002-0392			DoS Exec Code	2002-07-03	2008-09-10	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
Apache 1.3 through 1.3.24, and Apache 2.0 through 2.0.36, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a chunk-encoded HTTP request that causes Apache to use an incorrect size.

Total number of vulnerabilities : 59 Page : 1 (This Page)2