GCVE - cpe:2.3:a:apache:http_server:1.3.29:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:apache:http_server:1.3.29:*:*:*:*:*:*:*

part: a version: 1.3.29 update: *

Vendor	Apache (`b0303047-b7dd-5cf8-abcc-71b7d9d80b95`)
Product	Http Server (`294238f2-8bb7-5c9e-8927-fa193467c02f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:apache/httpd`	purl2cpe	2026-06-01 10:14:23.951616
`pkg:docker/apache/httpd`	purl2cpe	2026-06-01 10:14:23.951618
`pkg:github/apache/httpd`	purl2cpe	2026-06-01 10:14:23.951620
`pkg:rpm/fedora/httpd`	purl2cpe	2026-06-01 10:14:23.951622

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-5697`	not_vulnerable	2026-06-08 05:04:53.176449	Details available SQL injection vulnerability in mod_accounting.c in the mod_accounting module 0.5 and earlier for Apache allows remote attackers to execute arbitrary SQL commands via a Host header. Published: 2013-09-30T21:00:00.000Z Updated: 2024-09-16T16:58:47.951Z Open on db.gcve.eu Reference links http://osvdb.org/97588 http://www.baesystemsdetica.com.au/Research/Advisories/mod_accounting-Blind-SQL-Injection-%28DS-2013-006%29	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-4317`	vulnerable	2026-06-08 04:59:30.327700	Details available The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21, when the Revision 1179239 patch is in place, does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an @ (at sign) character and a : (colon) character in invalid positions. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-3368. Published: 2011-11-30T02:00:00.000Z Updated: 2024-08-07T00:01:51.602Z Open on db.gcve.eu Reference links https://community.qualys.com/blogs/securitylabs/2011/11/23/apache-reverse-proxy-bypass-issue http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 http://marc.info/?l=bugtraq&m=134987041210674&w=2 http://marc.info/?l=bugtraq&m=134987041210674&w=2 http://marc.info/?l=bugtraq&m=133294460209056&w=2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-3368`	vulnerable	2026-06-08 04:59:24.964884	Details available The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an initial @ (at sign) character. Published: 2011-10-05T22:00:00.000Z Updated: 2024-08-06T23:29:56.890Z Open on db.gcve.eu Reference links http://web.archiveorange.com/archive/v/ZyS0hzECD5zzb2NkvQlt http://svn.apache.org/viewvc?view=revision&revision=1179239 http://marc.info/?l=bugtraq&m=134987041210674&w=2 http://www.contextis.com/research/blog/reverseproxybypass/ http://seclists.org/fulldisclosure/2011/Oct/273	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0010`	vulnerable	2026-06-08 04:51:52.306596	Details available Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c in mod_proxy in the Apache HTTP Server before 1.3.42 on 64-bit platforms allows remote origin servers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a large chunk size that triggers a heap-based buffer overflow. Published: 2010-02-02T16:25:00.000Z Updated: 2024-08-07T00:30:46.953Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2010/0240 http://httpd.apache.org/dev/dist/CHANGES_1.3.42 http://marc.info/?l=bugtraq&m=130497311408250&w=2 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7923 http://secunia.com/advisories/39656	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-6750`	vulnerable	2026-06-08 04:50:09.724498	Details available The Apache HTTP Server 1.x and 2.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris, related to the lack of the mod_reqtimeout module in versions before 2.2.15. Published: 2011-12-27T18:00:00.000Z Updated: 2024-08-07T16:18:20.831Z Open on db.gcve.eu Reference links http://marc.info/?l=bugtraq&m=136612293908376&w=2 http://www.securitytracker.com/id/1038144 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380 http://ha.ckers.org/slowloris/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-1082`	vulnerable	2026-06-08 04:47:52.854937	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0492`	vulnerable	2026-06-08 04:47:49.974041	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0263`	vulnerable	2026-06-08 04:47:49.234763	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-0993`	vulnerable	2026-06-08 04:47:23.067115	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.