Description

This alert was generated using only banner information. It may be a false positive.

Security fixes in Apache version 1.3.37:
  • CVE-2006-3747 (cve.mitre.org) mod_rewrite: Fix an off-by-one security problem in the ldap scheme handling. For some RewriteRules this could lead to a pointer being written out of bounds. Reported by Mark Dowd of McAfee. [Mark Cox]

Affected Apache versions (up to 1.3.36).

Remediation

Upgrade Apache to the latest version.

References

Apache HTTP Server 1.x announcement

Apache homepage

Related Vulnerabilities

Oracle Database Server CVE-2018-2680 Vulnerability (CVE-2018-2680)

WordPress Plugin MegaOptim Image Optimizer Unspecified Vulnerability (1.3.2)

WordPress Plugin GD Star Rating 'export.php' Security Bypass (1.9.18)

WordPress Plugin ListingPro SQL Injection (2.9.3)

WordPress Plugin Portfolio by BestWebSoft Multiple Cross-Site Scripting Vulnerabilities (2.27)

Severity

Medium

Classification

CVE-2006-3747 CWE-189 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Tags

Missing Update