Vulnerabilities > Apache
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2002-12-31 | CVE-2002-1658 | Buffer Overflow vulnerability in Multiple Apache HTDigest Buffer overflow in htdigest in Apache 1.3.26 and 1.3.27 may allow attackers to execute arbitrary code via a long user argument. | 4.6 |
| 2002-11-04 | CVE-2002-1233 | Unspecified vulnerability in Apache Http Server A regression error in the Debian distributions of the apache-ssl package (before 1.3.9 on Debian 2.2, and before 1.3.26 on Debian 3.0), for Apache 1.3.27 and earlier, allows local users to read or modify the Apache password file via a symlink attack on temporary files when the administrator runs (1) htpasswd or (2) htdigest, a re-introduction of a vulnerability that was originally identified and addressed by CVE-2001-0131. | 2.6 |
| 2002-05-29 | CVE-2002-0257 | Cross-site scripting vulnerability in auction.pl of MakeBid Auction Deluxe 3.30 allows remote attackers to obtain information from other users via the form fields (1) TITLE, (2) DESCTIT, (3) DESC, (4) searchstring, (5) ALIAS, (6) EMAIL, (7) ADDRESS1, (8) ADDRESS2, (9) ADDRESS3, (10) PHONE1, (11) PHONE2, (12) PHONE3, or (13) PHONE4. | 7.5 |
| 2002-05-29 | CVE-2002-0249 | Path Disclosure vulnerability in Apache Http Server 2.0.28 PHP for Windows, when installed on Apache 2.0.28 beta as a standalone CGI module, allows remote attackers to obtain the physical path of the php.exe via a request with malformed arguments such as /123, which leaks the pathname in the error message. | 5.0 |
| 2002-05-29 | CVE-2002-0240 | Path Disclosure vulnerability in Apache Http Server 2.0.28 PHP, when installed with Apache and configured to search for index.php as a default web page, allows remote attackers to obtain the full pathname of the server via the HTTP OPTIONS method, which reveals the pathname in the resulting error message. | 5.0 |
| 2002-05-16 | CVE-2002-0185 | Unspecified vulnerability in Apache MOD Python mod_python version 2.7.6 and earlier allows a module indirectly imported by a published module to then be accessed via the publisher, which allows remote attackers to call possibly dangerous functions from the imported module. | 7.5 |
| 2002-03-22 | CVE-2000-1210 | Directory Traversal vulnerability in Apache Tomcat 1.1.3/3.0/3.1 Directory traversal vulnerability in source.jsp of Apache Tomcat before 3.1 allows remote attackers to read arbitrary files via a .. | 5.0 |
| 2001-12-31 | CVE-2001-1563 | Remote Security vulnerability in Tomcat Unknown vulnerability in Tomcat 3.2.1 running on HP Secure OS for Linux 1.0 allows attackers to access servlet resources. | 7.5 |
| 2001-12-31 | CVE-2001-1556 | Remote Security vulnerability in Apache The log files in Apache web server contain information directly supplied by clients and does not filter or quote control characters, which could allow remote attackers to hide HTTP requests and spoof source IP addresses when logs are viewed with UNIX programs such as cat, tail, and grep. | 5.0 |
| 2001-12-31 | CVE-2001-1534 | Session Fixation vulnerability in Apache Http Server mod_usertrack in Apache 1.3.11 through 1.3.20 generates session ID's using predictable information including host IP address, system time and server process ID, which allows local users to obtain session ID's and bypass authentication when these session ID's are used for authentication. | 2.1 |