Apache

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2003-0253 1Apache 1Http Server Apr 16, 2026 Aug 18, 2003 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The prefork MPM in Apache 2 before 2.0.47 does not properly handle certain errors from accept, which could lead to a denial of service.
CVE-2003-0192 1Apache 1Http Server Apr 16, 2026 Aug 18, 2003 N/A· v4 N/A· v3 6.4 MEDIUM· v2 Apache 2 before 2.0.47, and certain versions of mod_ssl for Apache 1.3, do not properly handle "certain sequences of per-directory renegotiations and the SSLCipherSuite directive being used to upgrade from a weak ciphers...Show more Apache 2 before 2.0.47, and certain versions of mod_ssl for Apache 1.3, do not properly handle "certain sequences of per-directory renegotiations and the SSLCipherSuite directive being used to upgrade from a weak ciphersuite to a strong one," which could cause Apache to use the weak ciphersuite.Show less
CVE-2003-0245 1Apache 1Http Server Apr 16, 2026 Jun 9, 2003 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Vulnerability in the apr_psprintf function in the Apache Portable Runtime (APR) library for Apache 2.0.37 through 2.0.45 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code vi...Show more Vulnerability in the apr_psprintf function in the Apache Portable Runtime (APR) library for Apache 2.0.37 through 2.0.45 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long strings, as demonstrated using XML objects to mod_dav, and possibly other vectors.Show less
CVE-2003-0189 1Apache 1Http Server Apr 16, 2026 Jun 9, 2003 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The authentication module for Apache 2.0.40 through 2.0.45 on Unix does not properly handle threads safely when using the crypt_r or crypt functions, which allows remote attackers to cause a denial of service (failed Bas...Show more The authentication module for Apache 2.0.40 through 2.0.45 on Unix does not properly handle threads safely when using the crypt_r or crypt functions, which allows remote attackers to cause a denial of service (failed Basic authentication with valid usernames and passwords) when a threaded MPM is used.Show less
CVE-2003-0134 1Apache 1Http Server Apr 16, 2026 Apr 11, 2003 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Unknown vulnerability in filestat.c for Apache running on OS2, versions 2.0 through 2.0.45, allows unknown attackers to cause a denial of service via requests related to device names.
CVE-2003-0132 1Apache 1Http Server Apr 16, 2026 Apr 11, 2003 N/A· v4 N/A· v3 5.0 MEDIUM· v2 A memory leak in Apache 2.0 through 2.0.44 allows remote attackers to cause a denial of service (memory consumption) via large chunks of linefeed characters, which causes Apache to allocate 80 bytes for each linefeed.
CVE-2003-0083 1Apache 1Http Server Apr 16, 2026 Apr 2, 2003 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Apache 1.3 before 1.3.25 and Apache 2.0 before version 2.0.46 does not filter terminal escape sequences from its access logs, which could make it easier for attackers to insert those sequences into terminal emulators con...Show more Apache 1.3 before 1.3.25 and Apache 2.0 before version 2.0.46 does not filter terminal escape sequences from its access logs, which could make it easier for attackers to insert those sequences into terminal emulators containing vulnerabilities related to escape sequences, a different vulnerability than CVE-2003-0020.Show less
CVE-2003-0020 1Apache 1Http Server Apr 16, 2026 Mar 18, 2003 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Apache does not filter terminal escape sequences from its error logs, which could make it easier for attackers to insert those sequences into terminal emulators containing vulnerabilities related to escape sequences.
CVE-2003-0045 1Apache 1Tomcat Apr 16, 2026 Feb 7, 2003 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Jakarta Tomcat before 3.3.1a on certain Windows systems may allow remote attackers to cause a denial of service (thread hang and resource consumption) via a request for a JSP page containing an MS-DOS device name, such a...Show more Jakarta Tomcat before 3.3.1a on certain Windows systems may allow remote attackers to cause a denial of service (thread hang and resource consumption) via a request for a JSP page containing an MS-DOS device name, such as aux.jsp.Show less
CVE-2003-0044 1Apache 1Tomcat Apr 16, 2026 Feb 7, 2003 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Multiple cross-site scripting (XSS) vulnerabilities in the (1) examples and (2) ROOT web applications for Jakarta Tomcat 3.x through 3.3.1a allow remote attackers to insert arbitrary web script or HTML.
CVE-2003-0043 1Apache 1Tomcat Apr 16, 2026 Feb 7, 2003 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, uses trusted privileges when processing the web.xml file, which could allow remote attackers to read portions of some files through the web.xml file.
CVE-2003-0042 1Apache 1Tomcat Apr 16, 2026 Feb 7, 2003 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, allows remote attackers to list directories even with an index.html or other file present, or obtain unprocessed source code for a JSP file, via a URL co...Show more Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, allows remote attackers to list directories even with an index.html or other file present, or obtain unprocessed source code for a JSP file, via a URL containing a null character.Show less
CVE-2003-0017 1Apache 1Http Server Apr 16, 2026 Feb 7, 2003 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Apache 2.0 before 2.0.44 on Windows platforms allows remote attackers to obtain certain files via an HTTP request that ends in certain illegal characters such as ">", which causes a different filename to be processed and...Show more Apache 2.0 before 2.0.44 on Windows platforms allows remote attackers to obtain certain files via an HTTP request that ends in certain illegal characters such as ">", which causes a different filename to be processed and served.Show less
CVE-2003-0016 1Apache 1Http Server Apr 16, 2026 Feb 7, 2003 N/A· v4 N/A· v3 7.5 HIGH· v2 Apache before 2.0.44, when running on unpatched Windows 9x and Me operating systems, allows remote attackers to cause a denial of service or execute arbitrary code via an HTTP request containing MS-DOS device names.
CVE-2002-1394 1Apache 1Tomcat Apr 16, 2026 Jan 17, 2003 N/A· v4 N/A· v3 7.5 HIGH· v2 Apache Tomcat 4.0.5 and earlier, when using both the invoker servlet and the default servlet, allows remote attackers to read source code for server files or bypass certain protections, a variant of CAN-2002-1148.
CVE-2002-2272 1Apache 2Http Server Tomcat Apr 16, 2026 Dec 31, 2002 N/A· v4 N/A· v3 7.8 HIGH· v2 Tomcat 4.0 through 4.1.12, using mod_jk 1.2.1 module on Apache 1.3 through 1.3.27, allows remote attackers to cause a denial of service (desynchronized communications) via an HTTP GET request with a Transfer-Encoding chu...Show more Tomcat 4.0 through 4.1.12, using mod_jk 1.2.1 module on Apache 1.3 through 1.3.27, allows remote attackers to cause a denial of service (desynchronized communications) via an HTTP GET request with a Transfer-Encoding chunked field with invalid values.Show less
CVE-2002-2103 1Apache 1Http Server Apr 16, 2026 Dec 31, 2002 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Apache before 1.3.24, when writing to the log file, records a spoofed hostname from the reverse lookup of an IP address, even when a double-reverse lookup fails, which allows remote attackers to hide the original source...Show more Apache before 1.3.24, when writing to the log file, records a spoofed hostname from the reverse lookup of an IP address, even when a double-reverse lookup fails, which allows remote attackers to hide the original source of activities.Show less
CVE-2002-2029 1Apache 1Http Server Apr 16, 2026 Dec 31, 2002 N/A· v4 N/A· v3 7.5 HIGH· v2 PHP, when installed on Windows with Apache and ScriptAlias for /php/ set to c:/php/, allows remote attackers to read arbitrary files and possibly execute arbitrary programs via an HTTP request for php.exe with a filename...Show more PHP, when installed on Windows with Apache and ScriptAlias for /php/ set to c:/php/, allows remote attackers to read arbitrary files and possibly execute arbitrary programs via an HTTP request for php.exe with a filename in the query string.Show less
CVE-2002-2012 1Apache 1Http Server Apr 16, 2026 Dec 31, 2002 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Unknown vulnerability in Apache 1.3.19 running on HP Secure OS for Linux 1.0 allows remote attackers to cause "unexpected results" via an HTTP request.
CVE-2002-2009 1Apache 1Tomcat Apr 16, 2026 Dec 31, 2002 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Apache Tomcat 4.0.1 allows remote attackers to obtain the web root path via HTTP requests for JSP files preceded by (1) +/, (2) >/, (3) </, and (4) %20/, which leaks the pathname in an error message.

Previous 1...164165166...169 Next