GCVE - cpe:2.3:a:apache:http_server:2.2.3:*:windows:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:apache:http_server:2.2.3:*:windows:*:*:*:*:*

part: a version: 2.2.3 update: *

Vendor	Apache (`b0303047-b7dd-5cf8-abcc-71b7d9d80b95`)
Product	Http Server (`294238f2-8bb7-5c9e-8927-fa193467c02f`)
Edition	windows
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:apache/httpd`	purl2cpe	2026-06-01 10:14:24.073920
`pkg:docker/apache/httpd`	purl2cpe	2026-06-01 10:14:24.073922
`pkg:github/apache/httpd`	purl2cpe	2026-06-01 10:14:24.073924
`pkg:rpm/fedora/httpd`	purl2cpe	2026-06-01 10:14:24.073926

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-2384`	not_vulnerable	2026-06-08 04:50:23.865846	Details available SQL injection vulnerability in mod_auth_mysql.c in the mod-auth-mysql (aka libapache2-mod-auth-mysql) module for the Apache HTTP Server 2.x, when configured to use a multibyte character set that allows a \ (backslash) as part of the character encoding, allows remote attackers to execute arbitrary SQL commands via unspecified inputs in a login request. Published: 2009-01-22T18:00:00.000Z Updated: 2024-08-07T08:58:02.299Z Open on db.gcve.eu Reference links http://openwall.com/lists/oss-security/2009/01/21/10 http://www.redhat.com/support/errata/RHSA-2009-0259.html https://exchange.xforce.ibmcloud.com/vulnerabilities/48163 http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053899.html http://klecker.debian.org/~white/mod-auth-mysql/CVE-2008-2384_mod-auth-mysql.patch	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-4154`	vulnerable	2026-06-08 04:49:11.108061	Details available Format string vulnerability in the mod_tcl module 1.0 for Apache 2.x allows context-dependent attackers to execute arbitrary code via format string specifiers that are not properly handled in a set_var function call in (1) tcl_cmds.c and (2) tcl_core.c. Published: 2006-10-16T19:00:00.000Z Updated: 2024-08-07T18:57:46.076Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/20527 http://securitytracker.com/id?1017062 http://secunia.com/advisories/22549 http://www.osvdb.org/29536 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=421	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-4110`	vulnerable	2026-06-08 04:49:10.962851	Details available Apache 2.2.2, when running on Windows, allows remote attackers to read source code of CGI programs via a request that contains uppercase (or alternate case) characters that bypass the case-sensitive ScriptAlias directive, but allow access to the file on case-insensitive file systems. Published: 2006-08-14T20:00:00.000Z Updated: 2024-08-07T18:57:45.871Z Open on db.gcve.eu Reference links http://www.osvdb.org/27913 http://www.securityfocus.com/archive/1/442882/100/0/threaded http://secunia.com/advisories/21490 http://www.securityfocus.com/archive/1/443487/100/200/threaded https://exchange.xforce.ibmcloud.com/vulnerabilities/28357	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.