List of arbitrary files on Web host via nph-test-cgi script.
Max CVSS
7.5
EPSS Score
0.44%
Published
1996-12-10
Updated
2022-08-17
phf CGI program allows remote command execution through shell metacharacters.
Max CVSS
10.0
EPSS Score
29.63%
Published
1996-03-20
Updated
2024-01-26
test-cgi program allows an attacker to list files on the server.
Max CVSS
5.0
EPSS Score
7.97%
Published
1996-04-01
Updated
2020-10-13
Apache httpd cookie buffer overflow for versions 1.1.1 and earlier.
Max CVSS
7.5
EPSS Score
0.14%
Published
1997-09-01
Updated
2022-08-17
Buffer overflow in Apache 1.2.5 and earlier allows a remote attacker to cause a denial of service with a large number of GET requests containing a large number of / characters.
Max CVSS
5.0
EPSS Score
0.37%
Published
1997-12-30
Updated
2022-08-17
ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs.
Max CVSS
7.5
EPSS Score
0.28%
Published
1997-01-01
Updated
2022-08-17
The Apache web server for Win32 may provide access to restricted files when a . (dot) is appended to a requested URL.
Max CVSS
5.0
EPSS Score
0.19%
Published
1999-12-12
Updated
2022-08-17
A default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /usr/doc, which allows remote users to read documentation files for the entire server.
Max CVSS
5.0
EPSS Score
2.94%
Published
1999-01-17
Updated
2020-10-13
Apache allows remote attackers to conduct a denial of service via a large number of MIME headers.
Max CVSS
10.0
EPSS Score
0.39%
Published
1999-09-03
Updated
2008-09-05

CVE-1999-1053

Public exploit
guestbook.pl cleanses user-inserted SSI commands by removing text between "<!--" and "-->" separators, which allows remote attackers to execute arbitrary commands when guestbook.pl is run on Apache 1.3.9 and possibly other versions, since Apache allows other closing sequences besides "-->".
Max CVSS
7.5
EPSS Score
94.36%
Published
1999-09-13
Updated
2008-09-05
Apache WWW server 1.3.1 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via a large number of MIME headers with the same name, aka the "sioux" vulnerability.
Max CVSS
10.0
EPSS Score
2.34%
Published
1998-08-07
Updated
2021-06-06
Multiple buffer overflows in smbvalid/smbval SMB authentication library, as used in Apache::AuthenSmb and possibly other modules, allows remote attackers to execute arbitrary commands via (1) a long username, (2) a long password, and (3) other unspecified methods.
Max CVSS
10.0
EPSS Score
0.13%
Published
1999-06-06
Updated
2020-07-21
mod_proxy in Apache 1.2.5 and earlier allows remote attackers to cause a denial of service via malformed FTP commands, which causes Apache to dump core.
Max CVSS
10.0
EPSS Score
0.36%
Published
1999-12-31
Updated
2016-10-18
A possible interaction between Apple MacOS X release 1.0 and Apache HTTP server allows remote attackers to cause a denial of service (crash) via a flood of HTTP GET requests to CGI programs, which generates a large number of processes.
Max CVSS
5.0
EPSS Score
0.23%
Published
1999-06-03
Updated
2021-09-22
The Apache 1.3.x HTTP server for Windows platforms allows remote attackers to list directory contents by requesting a URL containing a large number of / characters.
Max CVSS
5.0
EPSS Score
0.39%
Published
2000-05-31
Updated
2021-06-06
The default configuration of Apache 1.3.12 in SuSE Linux 6.4 allows remote attackers to read source code for CGI scripts by replacing the /cgi-bin/ in the requested URL with /cgi-bin-sdb/.
Max CVSS
5.0
EPSS Score
88.95%
Published
2000-11-14
Updated
2017-10-10
The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbitrary directories via the PROPFIND HTTP request method.
Max CVSS
5.0
EPSS Score
1.47%
Published
2000-11-14
Updated
2017-10-10
mod_rewrite in Apache 1.3.12 and earlier allows remote attackers to read arbitrary files if a RewriteRule directive is expanded to include a filename whose name contains a regular expression.
Max CVSS
5.0
EPSS Score
0.52%
Published
2000-12-19
Updated
2021-06-06
Vulnerability in the mod_vhost_alias virtual hosting module for Apache 1.3.9, 1.3.11 and 1.3.12 allows remote attackers to obtain the source code for CGI programs if the cgi-bin directory is under the document root.
Max CVSS
5.0
EPSS Score
0.39%
Published
2000-10-13
Updated
2021-06-06
Cross site scripting vulnerabilities in Apache 1.3.0 through 1.3.11 allow remote attackers to execute script as other web site visitors via (1) the printenv CGI (printenv.pl), which does not encode its output, (2) pages generated by the ap_send_error_response function such as a default 404, which does not add an explicit charset, or (3) various messages that are generated by certain Apache modules or core code. NOTE: the printenv issue might still exist for web browsers that can render text/plain content types as HTML, such as Internet Explorer, but CVE regards this as a design limitation of those browsers, not Apache. The printenv.pl/acuparam vector, discloser on 20070724, is one such variant.
Max CVSS
4.3
EPSS Score
0.26%
Published
2000-02-01
Updated
2021-06-06
Vulnerability in Apache httpd before 1.3.11, when configured for mass virtual hosting using mod_rewrite, or mod_vhost_alias in Apache 1.3.9, allows remote attackers to retrieve arbitrary files.
Max CVSS
5.0
EPSS Score
0.71%
Published
1999-08-20
Updated
2021-06-06
PHP 3.x (PHP3) on Apache 1.3.6 allows remote attackers to read arbitrary files via a modified .. (dot dot) attack containing "%5c" (encoded backslash) sequences.
Max CVSS
5.0
EPSS Score
3.52%
Published
2001-02-16
Updated
2017-10-10
htpasswd and htdigest in Apache 2.0a9, 1.3.14, and others allows local users to overwrite arbitrary files via a symlink attack.
Max CVSS
3.3
EPSS Score
0.04%
Published
2001-03-12
Updated
2020-10-09
Apache 1.3.20 on Windows servers allows remote attackers to bypass the default index page and list directory contents via a URL with a large number of / (slash) characters.
Max CVSS
5.0
EPSS Score
0.93%
Published
2001-10-30
Updated
2021-06-06
split-logfile in Apache 1.3.20 allows remote attackers to overwrite arbitrary files that end in the .log extension via an HTTP request with a / (slash) in the Host: header.
Max CVSS
5.0
EPSS Score
0.31%
Published
2001-10-30
Updated
2021-06-06
277 vulnerabilities found
1 2 3 4 5 6 7 8 9 10 11 12
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!