Description

This alert was generated using only banner information. It may be a false positive.

Fixed in Apache httpd 2.2.3:
  • important: mod_rewrite off-by-one error CVE-2006-3747
    An off-by-one flaw exists in the Rewrite module, mod_rewrite. Depending on the manner in which Apache httpd was compiled, this software defect may result in a vulnerability which, in combination with certain types of Rewrite rules in the web server configuration files, could be triggered remotely. For vulnerable builds, the nature of the vulnerability can be denial of service (crashing of web server processes) or potentially allow arbitrary code execution.

Affected Apache versions (up to 2.2.2).

Remediation

Upgrade Apache 2.x to the latest version.

References

Apache homepage

Apache httpd 2.2 vulnerabilities

Related Vulnerabilities

WordPress Plugin MiniMax-Page Layout Builder Cross-Site Scripting (1.3.4)

PHP Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2006-0207)

WordPress Plugin Bangla Sidebar Login Cross-Site Scripting (1.0)

WordPress Plugin Sketchus Pricing Tables Unspecified Vulnerability (2.0)

WordPress 5.1.x Cross-Site Request Forgery (5.1)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Tags

Code Execution Denial Of Service Missing Update CWE-189 CVE-2006-3747