Apache HTTP Server Security (httpd.org JSON)

Uebersicht

  • Quellen-ID (source_id): apache_httpd_sec
  • Feed (extern): Feed-URL oeffnen
  • Vendor / Produktinfos: Vendor-Web (Domain der Feed-URL)
  • Kategorie: vendor_advisory
  • Provider: httpd_vulnerabilities_json
  • Sprache: de
  • Zielgruppe: —
  • Tags: webserver, httpd
  • Aktiv: Ja
Letzter Fetch Letzter Erfolg Aufeinanderfolgende Fehler Letzte Fehlermeldung ETag Last-Modified
2026-10-21 10:17 UTC 2026-10-21 10:17 UTC 0 - "1f3628-65ddf9e0a9d8b-gzip" Thu, 15 Oct 2026 11:47:50 GMT

Letzte Eintraege

267 Eintraege · 50 pro Seite · Seite 6 von 6

Veroeffentlicht Titel CVEs EPSS-Pctl Severity
2002-06-17 00:00

CVE-2002-0392: Malicious requests can cause various effects ranging from a relatively harmless increase in system resources through to denial of service attacks and in some cases the ability to execute arbitrary remote code.

CVE-2002-0392

 -
2002-04-22 00:00

CVE-2002-1592: In some cases warning messages could get returned to end users in addition to being recorded in the error log. This could reveal the path to a CGI script for example, a minor security exposure.

CVE-2002-1592

 -
2001-09-28 00:00

CVE-2001-0729: A vulnerability was found in the Win32 port of Apache 1.3.20. A client submitting a very long URI could cause a directory listing to be returned rather than the default index page.

CVE-2001-0729

 -
2001-09-28 00:00

CVE-2001-0730: A vulnerability was found in the split-logfile support program. A request with a specially crafted Host: header could allow any file with a .log extension on the system to be written to.

CVE-2001-0730

 -
2001-07-09 00:00

CVE-2001-0731: A vulnerability was found when Multiviews are used to negotiate the directory index. In some configurations, requesting a URI with a QUERY_STRING of M=D could return a directory listing rather than the expected index page.

CVE-2001-0731

 -
2000-09-29 00:00

CVE-2000-0913: The Rewrite module, mod_rewrite, can allow access to any file on the web server. The vulnerability occurs only with certain specific cases of using regular expression references in RewriteRule directives: If the destination of a RewriteRule contains regular expression references then an attacker will be able to access any file on the server.

CVE-2000-0913

 -

CVE-2001-0925: The default installation can lead mod_negotiation and mod_dir or mod_autoindex to display a directory listing instead of the multiview index.html file if a very long path was created artificially by using many slashes.

CVE-2001-0925

 -

CVE-2001-1342: A vulnerability was found in the Win32 and OS2 ports of Apache 1.3. A client submitting a carefully constructed URI could cause a General Protection Fault in a child process, bringing up a message box which would have to be cleared by the operator to resume operation. This vulnerability introduced no identified means to compromise the server other than introducing a possible denial of service.

CVE-2001-1342

 -

CVE-2000-1205: Apache was vulnerable to cross site scripting issues. It was shown that malicious HTML tags can be embedded in client web requests if the server or script handling the request does not carefully encode all information displayed to the user. Using these vulnerabilities attackers could, for example, obtain copies of your private cookies used to authenticate you to other sites.

CVE-2000-1205

 -

CVE-2000-0505: A security hole on Apache for Windows allows a user to view the listing of a directory instead of the default HTML page by sending a carefully constructed request.

CVE-2000-0505

 -

CVE-2002-0061: Apache for Win32 before 1.3.24 and 2.0.34-beta allows remote attackers to execute arbitrary commands via parameters passed to batch file CGI scripts.

CVE-2002-0061

 -

CVE-2022-28614: The ap_rwrite() function in Apache HTTP Server 2.4.53 and earlier may read unintended memory if an attacker can cause the server to reflect very large input using ap_rwrite() or ap_rputs(), such as with mod_luas r:puts() function. Modules compiled and distributed separately from Apache HTTP Server that use the "ap_rputs" function and may pass it a very large (INT_MAX or larger) string must be compiled against current headers to resolve the issue.

CVE-2022-28614

 -

CVE-2000-1206: A security problem can occur for sites using mass name-based virtual hosting (using the new mod_vhost_alias module) or with special mod_rewrite rules.

CVE-2000-1206

 -

CVE-2000-1204: A security problem for users of the mass virtual hosting module, mod_vhost_alias, causes the source to a CGI to be sent if the cgi-bin directory is under the document root. However, it is not normal to have your cgi-bin directory under a document root.

CVE-2000-1204

 -

CVE-1999-1199: A serious problem exists when a client sends a large number of headers with the same header name. Apache uses up memory faster than the amount of memory required to simply store the received data itself. That is, memory use increases faster and faster as more headers are received, rather than increasing at a constant rate. This makes a denial of service attack based on this method more effective than methods which cause Apache to use memory at a constant rate, since the attacker has to send less data.

CVE-1999-1199

 -

CVE-2002-1156: In Apache 2.0.42 only, for a location where both WebDAV and CGI were enabled, a POST request to a CGI script would reveal the CGI source to a remote user.

CVE-2002-1156

 -

CVE-2005-2970: A memory leak in the worker MPM would allow remote attackers to cause a denial of service (memory consumption) via aborted connections, which prevents the memory for the transaction pool from being reused for other connections. This issue was downgraded in severity to low (from moderate) as sucessful exploitation of the race condition would be difficult.

CVE-2005-2970

 -
Alle Quellen