CVE-2006-3747: An off-by-one flaw exists in the Rewrite module, mod_rewrite. Depending on the manner in which Apache httpd was compiled, this software defect may result in a vulnerability which, in combination with certain types of Rewrite rules in the web server configuration files, could be triggered remotely. For vulnerable builds, the nature of the vulnerability can be denial of service (crashing of web server processes) or potentially allow arbitrary code execution.

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2006-07-27 00:00 UTC
  • Importiert: 2026-10-15 12:54 UTC
  • Quelle-ID: apache_httpd_sec
  • uid_hash: 5967c77ad8344f5000f61d1ec125e486920983967c710cf30597d7caa19e610d

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2006-3747

2006-07-28

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
Apache HTTP Server Security (httpd.org JSON)

apache_httpd_sec

vendor_advisory webserver, httpd - de https://httpd.apache.org/security/vulnerabilities-httpd.json