GCVE - cpe:2.3:a:apache:http_server:1.3.15:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:apache:http_server:1.3.15:*:*:*:*:*:*:*

part: a version: 1.3.15 update: *

Vendor	Apache (`b0303047-b7dd-5cf8-abcc-71b7d9d80b95`)
Product	Http Server (`294238f2-8bb7-5c9e-8927-fa193467c02f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:apache/httpd`	purl2cpe	2026-06-01 10:14:23.916456
`pkg:docker/apache/httpd`	purl2cpe	2026-06-01 10:14:23.916457
`pkg:github/apache/httpd`	purl2cpe	2026-06-01 10:14:23.916459
`pkg:rpm/fedora/httpd`	purl2cpe	2026-06-01 10:14:23.916461

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-5697`	not_vulnerable	2026-06-08 05:04:53.168724	Details available SQL injection vulnerability in mod_accounting.c in the mod_accounting module 0.5 and earlier for Apache allows remote attackers to execute arbitrary SQL commands via a Host header. Published: 2013-09-30T21:00:00.000Z Updated: 2024-09-16T16:58:47.951Z Open on db.gcve.eu Reference links http://osvdb.org/97588 http://www.baesystemsdetica.com.au/Research/Advisories/mod_accounting-Blind-SQL-Injection-%28DS-2013-006%29	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-4317`	vulnerable	2026-06-08 04:59:30.327479	Details available The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21, when the Revision 1179239 patch is in place, does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an @ (at sign) character and a : (colon) character in invalid positions. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-3368. Published: 2011-11-30T02:00:00.000Z Updated: 2024-08-07T00:01:51.602Z Open on db.gcve.eu Reference links https://community.qualys.com/blogs/securitylabs/2011/11/23/apache-reverse-proxy-bypass-issue http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 http://marc.info/?l=bugtraq&m=134987041210674&w=2 http://marc.info/?l=bugtraq&m=134987041210674&w=2 http://marc.info/?l=bugtraq&m=133294460209056&w=2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-3368`	vulnerable	2026-06-08 04:59:24.956096	Details available The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an initial @ (at sign) character. Published: 2011-10-05T22:00:00.000Z Updated: 2024-08-06T23:29:56.890Z Open on db.gcve.eu Reference links http://web.archiveorange.com/archive/v/ZyS0hzECD5zzb2NkvQlt http://svn.apache.org/viewvc?view=revision&revision=1179239 http://marc.info/?l=bugtraq&m=134987041210674&w=2 http://www.contextis.com/research/blog/reverseproxybypass/ http://seclists.org/fulldisclosure/2011/Oct/273	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0010`	vulnerable	2026-06-08 04:51:52.300433	Details available Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c in mod_proxy in the Apache HTTP Server before 1.3.42 on 64-bit platforms allows remote origin servers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a large chunk size that triggers a heap-based buffer overflow. Published: 2010-02-02T16:25:00.000Z Updated: 2024-08-07T00:30:46.953Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2010/0240 http://httpd.apache.org/dev/dist/CHANGES_1.3.42 http://marc.info/?l=bugtraq&m=130497311408250&w=2 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7923 http://secunia.com/advisories/39656	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-6750`	vulnerable	2026-06-08 04:50:09.718182	Details available The Apache HTTP Server 1.x and 2.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris, related to the lack of the mod_reqtimeout module in versions before 2.2.15. Published: 2011-12-27T18:00:00.000Z Updated: 2024-08-07T16:18:20.831Z Open on db.gcve.eu Reference links http://marc.info/?l=bugtraq&m=136612293908376&w=2 http://www.securitytracker.com/id/1038144 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380 http://ha.ckers.org/slowloris/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-2272`	vulnerable	2026-06-08 04:47:19.596514	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-2103`	vulnerable	2026-06-08 04:47:19.100158	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-2029`	vulnerable	2026-06-08 04:47:18.927494	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.