Apache » Http Server » 2.0.38 : Security Vulnerabilities, CVEs, Published In 2003 (Overflow)

Multiple stack-based buffer overflows in (1) mod_alias and (2) mod_rewrite for Apache before 1.3.29 allow attackers to create configuration files to cause a denial of service (crash) or execute arbitrary code via a regular expression with more than 9 captures.