CVE-2006-3747 : Détail

Off-by-one error in the ldap scheme handling in the Rewrite module (mod_rewrite) in Apache 1.3 from 1.3.28, 2.0.46 and other versions before 2.0.59, and 2.2, when RewriteEngine is enabled, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted URLs that are not properly handled using certain rewrite rules.

Faiblesses connexes

Métriques

EPSS

Score EPSS

Percentile EPSS

Informations sur l'Exploit

Exploit Database EDB-ID : 2237

Date de publication : 2006-08-20 22h00 +00:00
Auteur : Jacobo Avariento
EDB Vérifié : Yes

Exploit Database EDB-ID : 3996

Date de publication : 2007-05-25 22h00 +00:00
Auteur : fabio/b0x
EDB Vérifié : Yes

Exploit Database EDB-ID : 16752

Date de publication : 2010-02-14 23h00 +00:00
Auteur : Metasploit
EDB Vérifié : Yes

Exploit Database EDB-ID : 3680

Date de publication : 2007-04-06 22h00 +00:00
Auteur : axis
EDB Vérifié : Yes

Products Mentioned

Configuraton 0

Apache>>Http_server >> Version From (including) 1.3.28 To (excluding) 1.3.37

Apache>>Http_server >> Version From (including) 2.0.46 To (excluding) 2.0.59

Apache>>Http_server >> Version From (including) 2.2.0 To (excluding) 2.2.3

Configuraton 0

Canonical>>Ubuntu_linux >> Version 5.04

Canonical>>Ubuntu_linux >> Version 5.10

Canonical>>Ubuntu_linux >> Version 6.06

Configuraton 0

Debian>>Debian_linux >> Version 3.1

Références