Added: websites/staging/httpd/trunk/content/security/vulnerabilities-httpd.json
==============================================================================
--- websites/staging/httpd/trunk/content/security/vulnerabilities-httpd.json (added)
+++ websites/staging/httpd/trunk/content/security/vulnerabilities-httpd.json Thu Apr 22 10:57:01 2021
@@ -0,0 +1,32669 @@
+[
+ {
+ "impact": [
+ {
+ "other": "low"
+ }
+ ],
+ "data_type": "CVE",
+ "generator": {
+ "engine": "xmltojsonmjc 1.0"
+ },
+ "source": {
+ "advisory": "",
+ "defect": [],
+ "discovery": "UNKNOWN"
+ },
+ "timeline": [
+ {
+ "lang": "eng",
+ "value": "reported",
+ "time": "2004-08-05"
+ },
+ {
+ "lang": "eng",
+ "value": "public",
+ "time": "2004-09-15"
+ },
+ {
+ "lang": "eng",
+ "value": "2.0.51 released",
+ "time": "2004-09-15"
+ }
+ ],
+ "credit": [
+ {
+ "lang": "eng",
+ "value": "We would like to thank the Swedish IT Incident Centre (SITIC) for reporting this issue."
+ }
+ ],
+ "data_format": "MITRE",
+ "problemtype": {
+ "problemtype_data": [
+ {
+ "description": [
+ {
+ "lang": "eng",
+ "value": "Environment variable expansion flaw"
+ }
+ ]
+ }
+ ]
+ },
+ "data_version": "4.0",
+ "references": {},
+ "affects": {
+ "vendor": {
+ "vendor_data": [
+ {
+ "product": {
+ "product_data": [
+ {
+ "version": {
+ "version_data": [
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.50",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.49",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.48",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.47",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.46",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.45",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.44",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.43",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.42",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.40",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.39",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.37",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.36",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.35",
+ "version_affected": "="
+ }
+ ]
+ },
+ "product_name": "Apache HTTP Server"
+ }
+ ]
+ },
+ "vendor_name": "Apache Software Foundation"
+ }
+ ]
+ }
+ },
+ "CNA_private": {
+ "owner": "httpd"
+ },
+ "CVE_data_meta": {
+ "ASSIGNER": "security@apache.org",
+ "TITLE": "Environment variable expansion flaw",
+ "STATE": "PUBLIC",
+ "AKA": "",
+ "ID": "CVE-2004-0747",
+ "DATE_PUBLIC": "2004-09-15"
+ },
+ "description": {
+ "description_data": [
+ {
+ "lang": "eng",
+ "value": "A buffer overflow was found in the expansion of environment variables during configuration file parsing. This issue could allow a local user to gain the privileges of a httpd child if a server can be forced to parse a carefully crafted .htaccess file written by a local user."
+ }
+ ]
+ }
+ },
+ {
+ "impact": [
+ {
+ "other": "moderate"
+ }
+ ],
+ "data_type": "CVE",
+ "generator": {
+ "engine": "xmltojsonmjc 1.0"
+ },
+ "source": {
+ "advisory": "",
+ "defect": [],
+ "discovery": "UNKNOWN"
+ },
+ "timeline": [
+ {
+ "lang": "eng",
+ "value": "reported",
+ "time": "2007-05-02"
+ },
+ {
+ "lang": "eng",
+ "value": "public",
+ "time": "2007-06-18"
+ },
+ {
+ "lang": "eng",
+ "value": "2.0.61 released",
+ "time": "2007-09-07"
+ },
+ {
+ "lang": "eng",
+ "value": "2.2.6 released",
+ "time": "2007-09-07"
+ }
+ ],
+ "data_format": "MITRE",
+ "problemtype": {
+ "problemtype_data": [
+ {
+ "description": [
+ {
+ "lang": "eng",
+ "value": "mod_cache proxy DoS"
+ }
+ ]
+ }
+ ]
+ },
+ "data_version": "4.0",
+ "references": {},
+ "affects": {
+ "vendor": {
+ "vendor_data": [
+ {
+ "product": {
+ "product_data": [
+ {
+ "version": {
+ "version_data": [
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.59",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.58",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.55",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.54",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.53",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.52",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.51",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.50",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.49",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.48",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.47",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.46",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.45",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.44",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.43",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.42",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.40",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.39",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.37",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.4",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.3",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.2",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.0",
+ "version_affected": "="
+ }
+ ]
+ },
+ "product_name": "Apache HTTP Server"
+ }
+ ]
+ },
+ "vendor_name": "Apache Software Foundation"
+ }
+ ]
+ }
+ },
+ "CNA_private": {
+ "owner": "httpd"
+ },
+ "CVE_data_meta": {
+ "ASSIGNER": "security@apache.org",
+ "TITLE": "mod_cache proxy DoS",
+ "STATE": "PUBLIC",
+ "AKA": "",
+ "ID": "CVE-2007-1863",
+ "DATE_PUBLIC": "2007-06-18"
+ },
+ "description": {
+ "description_data": [
+ {
+ "lang": "eng",
+ "value": "A bug was found in the mod_cache module. On sites where caching is enabled, a remote attacker could send a carefully crafted request that would cause the Apache child process handling that request to crash. This could lead to a denial of service if using a threaded Multi-Processing Module."
+ }
+ ]
+ }
+ },
+ {
+ "impact": [
+ {
+ "other": "low"
+ }
+ ],
+ "data_type": "CVE",
+ "generator": {
+ "engine": "xmltojsonmjc 1.0"
+ },
+ "source": {
+ "advisory": "",
+ "defect": [],
+ "discovery": "UNKNOWN"
+ },
+ "timeline": [
+ {
+ "lang": "eng",
+ "value": "reported",
+ "time": "2010-05-04"
+ },
+ {
+ "lang": "eng",
+ "value": "public",
+ "time": "2010-07-25"
+ },
+ {
+ "lang": "eng",
+ "value": "2.2.16 released",
+ "time": "2010-07-25"
+ },
+ {
+ "lang": "eng",
+ "value": "2.0.64 released",
+ "time": "2010-10-19"
+ }
+ ],
+ "credit": [
+ {
+ "lang": "eng",
+ "value": "This issue was reported by Mark Drayton."
+ }
+ ],
+ "data_format": "MITRE",
+ "problemtype": {
+ "problemtype_data": [
+ {
+ "description": [
+ {
+ "lang": "eng",
+ "value": "mod_cache and mod_dav DoS"
+ }
+ ]
+ }
+ ]
+ },
+ "data_version": "4.0",
+ "references": {},
+ "affects": {
+ "vendor": {
+ "vendor_data": [
+ {
+ "product": {
+ "product_data": [
+ {
+ "version": {
+ "version_data": [
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.15",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.14",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.13",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.12",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.11",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.10",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.9",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.8",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.6",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.5",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.4",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.3",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.2",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.0",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.63",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.61",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.59",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.58",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.55",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.54",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.53",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.52",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.51",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.50",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.49",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.48",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.47",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.46",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.45",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.44",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.43",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.42",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.40",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.39",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.37",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.36",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.35",
+ "version_affected": "="
+ }
+ ]
+ },
+ "product_name": "Apache HTTP Server"
+ }
+ ]
+ },
+ "vendor_name": "Apache Software Foundation"
+ }
+ ]
+ }
+ },
+ "CNA_private": {
+ "owner": "httpd"
+ },
+ "CVE_data_meta": {
+ "ASSIGNER": "security@apache.org",
+ "TITLE": "mod_cache and mod_dav DoS",
+ "STATE": "PUBLIC",
+ "AKA": "",
+ "ID": "CVE-2010-1452",
+ "DATE_PUBLIC": "2010-07-25"
+ },
+ "description": {
+ "description_data": [
+ {
+ "lang": "eng",
+ "value": "A flaw was found in the handling of requests by mod_cache (2.2) and mod_dav (2.0 and 2.2). A malicious remote attacker could send a carefully crafted request and cause a httpd child process to crash. This crash would only be a denial of service if using the worker MPM. This issue is further mitigated as mod_dav is only affected by requests that are most likely to be authenticated, and mod_cache is only affected if the uncommon \"CacheIgnoreURLSessionIdentifiers\" directive, introduced in version 2.2.14, is used."
+ }
+ ]
+ }
+ },
+ {
+ "impact": [
+ {
+ "other": "important"
+ }
+ ],
+ "data_type": "CVE",
+ "generator": {
+ "engine": "xmltojsonmjc 1.0"
+ },
+ "source": {
+ "advisory": "",
+ "defect": [],
+ "discovery": "UNKNOWN"
+ },
+ "timeline": [
+ {
+ "lang": "eng",
+ "value": "reported",
+ "time": "2017-06-28"
+ },
+ {
+ "lang": "eng",
+ "value": "public",
+ "time": "2017-07-11"
+ },
+ {
+ "lang": "eng",
+ "value": "2.4.27 released",
+ "time": "2017-07-11"
+ },
+ {
+ "lang": "eng",
+ "value": "2.2.34 released",
+ "time": "2017-07-11"
+ }
+ ],
+ "credit": [
+ {
+ "lang": "eng",
+ "value": "We would like to thank Robert \u015awi\u0119cki for reporting this issue."
+ }
+ ],
+ "data_format": "MITRE",
+ "problemtype": {
+ "problemtype_data": [
+ {
+ "description": [
+ {
+ "lang": "eng",
+ "value": "Uninitialized memory reflection in mod_auth_digest"
+ }
+ ]
+ }
+ ]
+ },
+ "data_version": "4.0",
+ "references": {},
+ "affects": {
+ "vendor": {
+ "vendor_data": [
+ {
+ "product": {
+ "product_data": [
+ {
+ "version": {
+ "version_data": [
+ {
+ "version_name": "2.4",
+ "version_value": "2.4.26",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.4",
+ "version_value": "2.4.25",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.4",
+ "version_value": "2.4.23",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.4",
+ "version_value": "2.4.20",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.4",
+ "version_value": "2.4.18",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.4",
+ "version_value": "2.4.17",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.4",
+ "version_value": "2.4.16",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.4",
+ "version_value": "2.4.12",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.4",
+ "version_value": "2.4.10",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.4",
+ "version_value": "2.4.9",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.4",
+ "version_value": "2.4.7",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.4",
+ "version_value": "2.4.6",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.4",
+ "version_value": "2.4.4",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.4",
+ "version_value": "2.4.3",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.4",
+ "version_value": "2.4.2",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.4",
+ "version_value": "2.4.1",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.32",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.31",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.29",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.27",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.26",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.25",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.24",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.23",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.22",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.21",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.20",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.19",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.18",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.17",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.16",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.15",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.14",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.13",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.12",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.11",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.10",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.9",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.8",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.6",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.5",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.4",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.3",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.2",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.0",
+ "version_affected": "="
+ }
+ ]
+ },
+ "product_name": "Apache HTTP Server"
+ }
+ ]
+ },
+ "vendor_name": "Apache Software Foundation"
+ }
+ ]
+ }
+ },
+ "CNA_private": {
+ "owner": "httpd"
+ },
+ "CVE_data_meta": {
+ "ASSIGNER": "security@apache.org",
+ "TITLE": "Uninitialized memory reflection in mod_auth_digest",
+ "STATE": "PUBLIC",
+ "AKA": "",
+ "ID": "CVE-2017-9788",
+ "DATE_PUBLIC": "2017-07-11"
+ },
+ "description": {
+ "description_data": [
+ {
+ "lang": "eng",
+ "value": "The value placeholder in [Proxy-]Authorization headers of type 'Digest' was not initialized or reset before or between successive key=value assignments. by mod_auth_digest. Providing an initial key with no '=' assignment could reflect the stale value of uninitialized pool memory used by the prior request, leading to leakage of potentially confidential information, and a segfault."
+ }
+ ]
+ }
+ },
+ {
+ "impact": [
+ {
+ "other": "low"
+ }
+ ],
+ "data_type": "CVE",
+ "generator": {
+ "engine": "xmltojsonmjc 1.0"
+ },
+ "source": {
+ "advisory": "",
+ "defect": [],
+ "discovery": "UNKNOWN"
+ },
+ "timeline": [
+ {
+ "lang": "eng",
+ "value": "reported",
+ "time": "2004-03-02"
+ },
+ {
+ "lang": "eng",
+ "value": "public",
+ "time": "2004-03-20"
+ },
+ {
+ "lang": "eng",
+ "value": "2.0.53 released",
+ "time": "2005-02-08"
+ }
+ ],
+ "data_format": "MITRE",
+ "problemtype": {
+ "problemtype_data": [
+ {
+ "description": [
+ {
+ "lang": "eng",
+ "value": "mod_disk_cache stores sensitive headers"
+ }
+ ]
+ }
+ ]
+ },
+ "data_version": "4.0",
+ "references": {},
+ "affects": {
+ "vendor": {
+ "vendor_data": [
+ {
+ "product": {
+ "product_data": [
+ {
+ "version": {
+ "version_data": [
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.52",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.51",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.50",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.49",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.48",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.47",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.46",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.45",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.44",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.43",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.42",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.40",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.39",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.37",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.36",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.35",
+ "version_affected": "="
+ }
+ ]
+ },
+ "product_name": "Apache HTTP Server"
+ }
+ ]
+ },
+ "vendor_name": "Apache Software Foundation"
+ }
+ ]
+ }
+ },
+ "CNA_private": {
+ "owner": "httpd"
+ },
+ "CVE_data_meta": {
+ "ASSIGNER": "security@apache.org",
+ "TITLE": "mod_disk_cache stores sensitive headers",
+ "STATE": "PUBLIC",
+ "AKA": "",
+ "ID": "CVE-2004-1834",
+ "DATE_PUBLIC": "2004-03-20"
+ },
+ "description": {
+ "description_data": [
+ {
+ "lang": "eng",
+ "value": "The experimental mod_disk_cache module stored client authentication credentials for cached objects such as proxy authentication credentials and Basic Authentication passwords on disk."
+ }
+ ]
+ }
+ },
+ {
+ "impact": [
+ {
+ "other": "moderate"
+ }
+ ],
+ "data_type": "CVE",
+ "generator": {
+ "engine": "xmltojsonmjc 1.0"
+ },
+ "source": {
+ "advisory": "",
+ "defect": [],
+ "discovery": "UNKNOWN"
+ },
+ "timeline": [
+ {
+ "lang": "eng",
+ "value": "reported",
+ "time": "2008-12-25"
+ },
+ {
+ "lang": "eng",
+ "value": "public",
+ "time": "2009-06-01"
+ },
+ {
+ "lang": "eng",
+ "value": "2.2.12 released",
+ "time": "2009-07-27"
+ }
+ ],
+ "data_format": "MITRE",
+ "problemtype": {
+ "problemtype_data": [
+ {
+ "description": [
+ {
+ "lang": "eng",
+ "value": "APR-util heap underwrite"
+ }
+ ]
+ }
+ ]
+ },
+ "data_version": "4.0",
+ "references": {},
+ "affects": {
+ "vendor": {
+ "vendor_data": [
+ {
+ "product": {
+ "product_data": [
+ {
+ "version": {
+ "version_data": [
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.11",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.10",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.9",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.8",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.6",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.5",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.4",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.3",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.2",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.0",
+ "version_affected": "="
+ }
+ ]
+ },
+ "product_name": "Apache HTTP Server"
+ }
+ ]
+ },
+ "vendor_name": "Apache Software Foundation"
+ }
+ ]
+ }
+ },
+ "CNA_private": {
+ "owner": "httpd"
+ },
+ "CVE_data_meta": {
+ "ASSIGNER": "security@apache.org",
+ "TITLE": "APR-util heap underwrite",
+ "STATE": "PUBLIC",
+ "AKA": "",
+ "ID": "CVE-2009-0023",
+ "DATE_PUBLIC": "2009-06-01"
+ },
+ "description": {
+ "description_data": [
+ {
+ "lang": "eng",
+ "value": "A heap-based underwrite flaw was found in the way the bundled copy of the APR-util library created compiled forms of particular search patterns. An attacker could formulate a specially-crafted search keyword, that would overwrite arbitrary heap memory locations when processed by the pattern preparation engine."
+ }
+ ]
+ }
+ },
+ {
+ "impact": [
+ {
+ "other": "important"
+ }
+ ],
+ "data_type": "CVE",
+ "generator": {
+ "engine": "xmltojsonmjc 1.0"
+ },
+ "source": {
+ "advisory": "",
+ "defect": [],
+ "discovery": "UNKNOWN"
+ },
+ "timeline": [
+ {
+ "lang": "eng",
+ "value": "reported",
+ "time": "2001-11-11"
+ },
+ {
+ "lang": "eng",
+ "value": "public",
+ "time": "2002-10-03"
+ },
+ {
+ "lang": "eng",
+ "value": "1.3.27 released",
+ "time": "2002-10-03"
+ }
+ ],
+ "data_format": "MITRE",
+ "problemtype": {
+ "problemtype_data": [
+ {
+ "description": [
+ {
+ "lang": "eng",
+ "value": "Shared memory permissions lead to local privilege escalation"
+ }
+ ]
+ }
+ ]
+ },
+ "data_version": "4.0",
+ "references": {},
+ "affects": {
+ "vendor": {
+ "vendor_data": [
+ {
+ "product": {
+ "product_data": [
+ {
+ "version": {
+ "version_data": [
+ {
+ "version_name": "1.3",
+ "version_value": "1.3.26",
+ "version_affected": "="
+ },
+ {
+ "version_name": "1.3",
+ "version_value": "1.3.24",
+ "version_affected": "="
+ },
+ {
+ "version_name": "1.3",
+ "version_value": "1.3.22",
+ "version_affected": "="
+ },
+ {
+ "version_name": "1.3",
+ "version_value": "1.3.20",
+ "version_affected": "="
+ },
+ {
+ "version_name": "1.3",
+ "version_value": "1.3.19",
+ "version_affected": "="
+ },
+ {
+ "version_name": "1.3",
+ "version_value": "1.3.17",
+ "version_affected": "="
+ },
+ {
+ "version_name": "1.3",
+ "version_value": "1.3.14",
+ "version_affected": "="
+ },
+ {
+ "version_name": "1.3",
+ "version_value": "1.3.12",
+ "version_affected": "="
+ },
+ {
+ "version_name": "1.3",
+ "version_value": "1.3.11",
+ "version_affected": "="
+ },
+ {
+ "version_name": "1.3",
+ "version_value": "1.3.9",
+ "version_affected": "="
+ },
+ {
+ "version_name": "1.3",
+ "version_value": "1.3.6",
+ "version_affected": "="
+ },
+ {
+ "version_name": "1.3",
+ "version_value": "1.3.4",
+ "version_affected": "="
+ },
+ {
+ "version_name": "1.3",
+ "version_value": "1.3.3",
+ "version_affected": "="
+ },
+ {
+ "version_name": "1.3",
+ "version_value": "1.3.2",
+ "version_affected": "="
+ },
+ {
+ "version_name": "1.3",
+ "version_value": "1.3.1",
+ "version_affected": "="
+ },
+ {
+ "version_name": "1.3",
+ "version_value": "1.3.0",
+ "version_affected": "="
+ }
+ ]
+ },
+ "product_name": "Apache HTTP Server"
+ }
+ ]
+ },
+ "vendor_name": "Apache Software Foundation"
+ }
+ ]
+ }
+ },
+ "CNA_private": {
+ "owner": "httpd"
+ },
+ "CVE_data_meta": {
+ "ASSIGNER": "security@apache.org",
+ "TITLE": "Shared memory permissions lead to local privilege escalation",
+ "STATE": "PUBLIC",
+ "AKA": "",
+ "ID": "CVE-2002-0839",
+ "DATE_PUBLIC": "2002-10-03"
+ },
+ "description": {
+ "description_data": [
+ {
+ "lang": "eng",
+ "value": "The permissions of the shared memory used for the scoreboard allows an attacker who can execute under the Apache UID to send a signal to any process as root or cause a local denial of service attack."
+ }
+ ]
+ }
+ },
+ {
+ "impact": [
+ {
+ "other": "moderate"
+ }
+ ],
+ "data_type": "CVE",
+ "generator": {
+ "engine": "xmltojsonmjc 1.0"
+ },
+ "source": {
+ "advisory": "",
+ "defect": [],
+ "discovery": "UNKNOWN"
+ },
+ "timeline": [
+ {
+ "lang": "eng",
+ "value": "reported",
+ "time": "2008-05-29"
+ },
+ {
+ "lang": "eng",
+ "value": "public",
+ "time": "2008-06-10"
+ },
+ {
+ "lang": "eng",
+ "value": "2.0.64 released",
+ "time": "2010-10-19"
+ },
+ {
+ "lang": "eng",
+ "value": "2.2.9 released",
+ "time": "2008-06-14"
+ }
+ ],
+ "data_format": "MITRE",
+ "problemtype": {
+ "problemtype_data": [
+ {
+ "description": [
+ {
+ "lang": "eng",
+ "value": "mod_proxy_http DoS"
+ }
+ ]
+ }
+ ]
+ },
+ "data_version": "4.0",
+ "references": {},
+ "affects": {
+ "vendor": {
+ "vendor_data": [
+ {
+ "product": {
+ "product_data": [
+ {
+ "version": {
+ "version_data": [
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.63",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.61",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.59",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.58",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.55",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.54",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.53",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.52",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.51",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.50",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.49",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.48",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.47",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.46",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.45",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.44",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.43",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.42",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.40",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.39",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.37",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.36",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.0",
+ "version_value": "2.0.35",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.8",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.6",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.5",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.4",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.3",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.2",
+ "version_affected": "="
+ },
+ {
+ "version_name": "2.2",
+ "version_value": "2.2.0",
+ "version_affected": "="
+ }
+ ]
+ },
+ "product_name": "Apache HTTP Server"
+ }
+ ]
+ },
+ "vendor_name": "Apache Software Foundation"
+ }
+ ]
+ }
+ },
+ "CNA_private": {
+ "owner": "httpd"
+ },
+ "CVE_data_meta": {
+ "ASSIGNER": "security@apache.org",
+ "TITLE": "mod_proxy_http DoS",
+ "STATE": "PUBLIC",
+ "AKA": "",
+ "ID": "CVE-2008-2364",
+ "DATE_PUBLIC": "2008-06-10"
+ },
+ "description": {
+ "description_data": [
+ {
+ "lang": "eng",
+ "value": "A flaw was found in the handling of excessive interim responses from an origin server when using mod_proxy_http. A remote attacker could cause a denial of service or high memory usage."
+ }
+ ]
+ }
+ },
+ {
+ "impact": [
+ {
+ "other": "important"
+ }
+ ],
+ "data_type": "CVE",
+ "generator": {
+ "engine": "xmltojsonmjc 1.0"
+ },
+ "source": {
+ "advisory": "",
+ "defect": [],
+ "discovery": "UNKNOWN"
+ },
+ "timeline": [
+ {
+ "lang": "eng",
+ "value": "reported",
+ "time": "2002-09-23"
+ },
+ {
+ "lang": "eng",
+ "value": "public",
+ "time": "2002-10-03"
+ },
+ {
+ "lang": "eng",
+ "value": "1.3.27 released",
+ "time": "2002-10-03"
+ }
+ ],
+ "data_format": "MITRE",
+ "problemtype": {
+ "problemtype_data": [
+ {
+ "description": [
+ {
+ "lang": "eng",
+ "value": "Buffer overflows in ab utility"
+ }
+ ]
+ }
+ ]
+ },
+ "data_version": "4.0",
+ "references": {},
+ "affects": {
+ "vendor": {
+ "vendor_data": [
+ {
+ "product": {
+ "product_data": [
+ {
+ "version": {
+ "version_data": [
+ {
+ "version_name": "1.3",
+ "version_value": "1.3.26",
+ "version_affected": "="
+ },
+ {
+ "version_name": "1.3",
+ "version_value": "1.3.24",
+ "version_affected": "="
+ },
+ {
+ "version_name": "1.3",
+ "version_value": "1.3.22",
+ "version_affected": "="
+ },
+ {
+ "version_name": "1.3",
+ "version_value": "1.3.20",
+ "version_affected": "="
+ },
+ {
+ "version_name": "1.3",
+ "version_value": "1.3.19",
+ "version_affected": "="
+ },
+ {
+ "version_name": "1.3",
+ "version_value": "1.3.17",
+ "version_affected": "="
+ },
+ {
+ "version_name": "1.3",
+ "version_value": "1.3.14",
+ "version_affected": "="
+ },
+ {
+ "version_name": "1.3",
+ "version_value": "1.3.12",
+ "version_affected": "="
+ },
+ {
+ "version_name": "1.3",
+ "version_value": "1.3.11",
+ "version_affected": "="
+ },
+ {
+ "version_name": "1.3",
+ "version_value": "1.3.9",
+ "version_affected": "="
+ },
+ {
[... 30873 lines stripped ...]