You are viewing a plain text version of this content. The canonical link for it is here.
Posted to cvs@httpd.apache.org by mj...@apache.org on 2021/03/30 10:13:34 UTC
svn commit: r1888194 [1/13] - /httpd/site/trunk/content/security/json/
Author: mjc
Date: Tue Mar 30 10:13:32 2021
New Revision: 1888194
URL: http://svn.apache.org/viewvc?rev=1888194&view=rev
Log:
Convert all the vulnerability XML files to JSON one-time and commit them to
somewhere that's public (since we don't mind if others consume these files).
Since these were all generated automatically they won't be perfect and can be
edited here as this will be the primary source for generating the vulnerability
pages.
Added:
httpd/site/trunk/content/security/json/
httpd/site/trunk/content/security/json/CVE-1999-1199.json
httpd/site/trunk/content/security/json/CVE-2000-0505.json
httpd/site/trunk/content/security/json/CVE-2000-0913.json
httpd/site/trunk/content/security/json/CVE-2000-1204.json
httpd/site/trunk/content/security/json/CVE-2000-1205.json
httpd/site/trunk/content/security/json/CVE-2000-1206.json
httpd/site/trunk/content/security/json/CVE-2001-0729.json
httpd/site/trunk/content/security/json/CVE-2001-0730.json
httpd/site/trunk/content/security/json/CVE-2001-0731.json
httpd/site/trunk/content/security/json/CVE-2001-0925.json
httpd/site/trunk/content/security/json/CVE-2001-1342.json
httpd/site/trunk/content/security/json/CVE-2002-0061.json
httpd/site/trunk/content/security/json/CVE-2002-0392.json
httpd/site/trunk/content/security/json/CVE-2002-0654.json
httpd/site/trunk/content/security/json/CVE-2002-0661.json
httpd/site/trunk/content/security/json/CVE-2002-0839.json
httpd/site/trunk/content/security/json/CVE-2002-0840.json
httpd/site/trunk/content/security/json/CVE-2002-0843.json
httpd/site/trunk/content/security/json/CVE-2002-1156.json
httpd/site/trunk/content/security/json/CVE-2002-1592.json
httpd/site/trunk/content/security/json/CVE-2002-1593.json
httpd/site/trunk/content/security/json/CVE-2003-0016.json
httpd/site/trunk/content/security/json/CVE-2003-0017.json
httpd/site/trunk/content/security/json/CVE-2003-0020.json
httpd/site/trunk/content/security/json/CVE-2003-0083.json
httpd/site/trunk/content/security/json/CVE-2003-0132.json
httpd/site/trunk/content/security/json/CVE-2003-0134.json
httpd/site/trunk/content/security/json/CVE-2003-0189.json
httpd/site/trunk/content/security/json/CVE-2003-0192.json
httpd/site/trunk/content/security/json/CVE-2003-0245.json
httpd/site/trunk/content/security/json/CVE-2003-0253.json
httpd/site/trunk/content/security/json/CVE-2003-0254.json
httpd/site/trunk/content/security/json/CVE-2003-0460.json
httpd/site/trunk/content/security/json/CVE-2003-0542.json
httpd/site/trunk/content/security/json/CVE-2003-0789.json
httpd/site/trunk/content/security/json/CVE-2003-0987.json
httpd/site/trunk/content/security/json/CVE-2003-0993.json
httpd/site/trunk/content/security/json/CVE-2004-0113.json
httpd/site/trunk/content/security/json/CVE-2004-0174.json
httpd/site/trunk/content/security/json/CVE-2004-0488.json
httpd/site/trunk/content/security/json/CVE-2004-0492.json
httpd/site/trunk/content/security/json/CVE-2004-0493.json
httpd/site/trunk/content/security/json/CVE-2004-0747.json
httpd/site/trunk/content/security/json/CVE-2004-0748.json
httpd/site/trunk/content/security/json/CVE-2004-0751.json
httpd/site/trunk/content/security/json/CVE-2004-0786.json
httpd/site/trunk/content/security/json/CVE-2004-0809.json
httpd/site/trunk/content/security/json/CVE-2004-0811.json
httpd/site/trunk/content/security/json/CVE-2004-0885.json
httpd/site/trunk/content/security/json/CVE-2004-0940.json
httpd/site/trunk/content/security/json/CVE-2004-0942.json
httpd/site/trunk/content/security/json/CVE-2004-1834.json
httpd/site/trunk/content/security/json/CVE-2005-1268.json
httpd/site/trunk/content/security/json/CVE-2005-2088.json
httpd/site/trunk/content/security/json/CVE-2005-2491.json
httpd/site/trunk/content/security/json/CVE-2005-2700.json
httpd/site/trunk/content/security/json/CVE-2005-2728.json
httpd/site/trunk/content/security/json/CVE-2005-2970.json
httpd/site/trunk/content/security/json/CVE-2005-3352.json
httpd/site/trunk/content/security/json/CVE-2005-3357.json
httpd/site/trunk/content/security/json/CVE-2006-3747.json
httpd/site/trunk/content/security/json/CVE-2006-3918.json
httpd/site/trunk/content/security/json/CVE-2006-5752.json
httpd/site/trunk/content/security/json/CVE-2007-1862.json
httpd/site/trunk/content/security/json/CVE-2007-1863.json
httpd/site/trunk/content/security/json/CVE-2007-3304.json
httpd/site/trunk/content/security/json/CVE-2007-3847.json
httpd/site/trunk/content/security/json/CVE-2007-5000.json
httpd/site/trunk/content/security/json/CVE-2007-6388.json
httpd/site/trunk/content/security/json/CVE-2007-6420.json
httpd/site/trunk/content/security/json/CVE-2007-6421.json
httpd/site/trunk/content/security/json/CVE-2007-6422.json
httpd/site/trunk/content/security/json/CVE-2008-0005.json
httpd/site/trunk/content/security/json/CVE-2008-0456.json
httpd/site/trunk/content/security/json/CVE-2008-2364.json
httpd/site/trunk/content/security/json/CVE-2008-2939.json
httpd/site/trunk/content/security/json/CVE-2009-0023.json
httpd/site/trunk/content/security/json/CVE-2009-1191.json
httpd/site/trunk/content/security/json/CVE-2009-1195.json
httpd/site/trunk/content/security/json/CVE-2009-1890.json
httpd/site/trunk/content/security/json/CVE-2009-1891.json
httpd/site/trunk/content/security/json/CVE-2009-1955.json
httpd/site/trunk/content/security/json/CVE-2009-1956.json
httpd/site/trunk/content/security/json/CVE-2009-2412.json
httpd/site/trunk/content/security/json/CVE-2009-2699.json
httpd/site/trunk/content/security/json/CVE-2009-3094.json
httpd/site/trunk/content/security/json/CVE-2009-3095.json
httpd/site/trunk/content/security/json/CVE-2009-3560.json
httpd/site/trunk/content/security/json/CVE-2009-3720.json
httpd/site/trunk/content/security/json/CVE-2010-0010.json
httpd/site/trunk/content/security/json/CVE-2010-0408.json
httpd/site/trunk/content/security/json/CVE-2010-0425.json
httpd/site/trunk/content/security/json/CVE-2010-0434.json
httpd/site/trunk/content/security/json/CVE-2010-1452.json
httpd/site/trunk/content/security/json/CVE-2010-1623.json
httpd/site/trunk/content/security/json/CVE-2010-2068.json
httpd/site/trunk/content/security/json/CVE-2010-2791.json
httpd/site/trunk/content/security/json/CVE-2011-0419.json
httpd/site/trunk/content/security/json/CVE-2011-3192.json
httpd/site/trunk/content/security/json/CVE-2011-3348.json
httpd/site/trunk/content/security/json/CVE-2011-3368.json
httpd/site/trunk/content/security/json/CVE-2011-3607.json
httpd/site/trunk/content/security/json/CVE-2011-4317.json
httpd/site/trunk/content/security/json/CVE-2012-0021.json
httpd/site/trunk/content/security/json/CVE-2012-0031.json
httpd/site/trunk/content/security/json/CVE-2012-0053.json
httpd/site/trunk/content/security/json/CVE-2012-0883.json
httpd/site/trunk/content/security/json/CVE-2012-2687.json
httpd/site/trunk/content/security/json/CVE-2012-3499.json
httpd/site/trunk/content/security/json/CVE-2012-3502.json
httpd/site/trunk/content/security/json/CVE-2012-4557.json
httpd/site/trunk/content/security/json/CVE-2012-4558.json
httpd/site/trunk/content/security/json/CVE-2013-1862.json
httpd/site/trunk/content/security/json/CVE-2013-1896.json
httpd/site/trunk/content/security/json/CVE-2013-2249.json
httpd/site/trunk/content/security/json/CVE-2013-4352.json
httpd/site/trunk/content/security/json/CVE-2013-5704.json
httpd/site/trunk/content/security/json/CVE-2013-6438.json
httpd/site/trunk/content/security/json/CVE-2014-0098.json
httpd/site/trunk/content/security/json/CVE-2014-0117.json
httpd/site/trunk/content/security/json/CVE-2014-0118.json
httpd/site/trunk/content/security/json/CVE-2014-0226.json
httpd/site/trunk/content/security/json/CVE-2014-0231.json
httpd/site/trunk/content/security/json/CVE-2014-3523.json
httpd/site/trunk/content/security/json/CVE-2014-3581.json
httpd/site/trunk/content/security/json/CVE-2014-3583.json
httpd/site/trunk/content/security/json/CVE-2014-8109.json
httpd/site/trunk/content/security/json/CVE-2015-0228.json
httpd/site/trunk/content/security/json/CVE-2015-0253.json
httpd/site/trunk/content/security/json/CVE-2015-3183.json
httpd/site/trunk/content/security/json/CVE-2015-3185.json
httpd/site/trunk/content/security/json/CVE-2016-0736.json
httpd/site/trunk/content/security/json/CVE-2016-1546.json
httpd/site/trunk/content/security/json/CVE-2016-2161.json
httpd/site/trunk/content/security/json/CVE-2016-4975.json
httpd/site/trunk/content/security/json/CVE-2016-4979.json
httpd/site/trunk/content/security/json/CVE-2016-5387.json
httpd/site/trunk/content/security/json/CVE-2016-8740.json
httpd/site/trunk/content/security/json/CVE-2016-8743.json
httpd/site/trunk/content/security/json/CVE-2017-15710.json
httpd/site/trunk/content/security/json/CVE-2017-15715.json
httpd/site/trunk/content/security/json/CVE-2017-3167.json
httpd/site/trunk/content/security/json/CVE-2017-3169.json
httpd/site/trunk/content/security/json/CVE-2017-7659.json
httpd/site/trunk/content/security/json/CVE-2017-7668.json
httpd/site/trunk/content/security/json/CVE-2017-7679.json
httpd/site/trunk/content/security/json/CVE-2017-9788.json
httpd/site/trunk/content/security/json/CVE-2017-9789.json
httpd/site/trunk/content/security/json/CVE-2017-9798.json
httpd/site/trunk/content/security/json/CVE-2018-11763.json
httpd/site/trunk/content/security/json/CVE-2018-1283.json
httpd/site/trunk/content/security/json/CVE-2018-1301.json
httpd/site/trunk/content/security/json/CVE-2018-1302.json
httpd/site/trunk/content/security/json/CVE-2018-1303.json
httpd/site/trunk/content/security/json/CVE-2018-1312.json
httpd/site/trunk/content/security/json/CVE-2018-1333.json
httpd/site/trunk/content/security/json/CVE-2018-17189.json
httpd/site/trunk/content/security/json/CVE-2018-17199.json
httpd/site/trunk/content/security/json/CVE-2018-8011.json
httpd/site/trunk/content/security/json/CVE-2019-0190.json
httpd/site/trunk/content/security/json/CVE-2019-0196.json
httpd/site/trunk/content/security/json/CVE-2019-0197.json
httpd/site/trunk/content/security/json/CVE-2019-0211.json
httpd/site/trunk/content/security/json/CVE-2019-0215.json
httpd/site/trunk/content/security/json/CVE-2019-0217.json
httpd/site/trunk/content/security/json/CVE-2019-0220.json
httpd/site/trunk/content/security/json/CVE-2019-10081.json
httpd/site/trunk/content/security/json/CVE-2019-10082.json
httpd/site/trunk/content/security/json/CVE-2019-10092.json
httpd/site/trunk/content/security/json/CVE-2019-10097.json
httpd/site/trunk/content/security/json/CVE-2019-10098.json
httpd/site/trunk/content/security/json/CVE-2019-9517.json
httpd/site/trunk/content/security/json/CVE-2020-11984.json
httpd/site/trunk/content/security/json/CVE-2020-11985.json
httpd/site/trunk/content/security/json/CVE-2020-11993.json
httpd/site/trunk/content/security/json/CVE-2020-1927.json
httpd/site/trunk/content/security/json/CVE-2020-1934.json
httpd/site/trunk/content/security/json/CVE-2020-9490.json
Added: httpd/site/trunk/content/security/json/CVE-1999-1199.json
URL: http://svn.apache.org/viewvc/httpd/site/trunk/content/security/json/CVE-1999-1199.json?rev=1888194&view=auto
==============================================================================
--- httpd/site/trunk/content/security/json/CVE-1999-1199.json (added)
+++ httpd/site/trunk/content/security/json/CVE-1999-1199.json Tue Mar 30 10:13:32 2021
@@ -0,0 +1,86 @@
+{
+ "data_type": "CVE",
+ "data_format": "MITRE",
+ "data_version": "4.0",
+ "generator": {
+ "engine": "xmltojsonmjc 1.0"
+ },
+ "references": {},
+ "timeline": [
+ {
+ "time": "1998-09-23",
+ "lang": "eng",
+ "value": "1.3.2 released"
+ }
+ ],
+ "CNA_private": {
+ "owner": "httpd"
+ },
+ "CVE_data_meta": {
+ "ASSIGNER": "security@apache.org",
+ "AKA": "",
+ "STATE": "PUBLIC",
+ "ID": "CVE-1999-1199",
+ "TITLE": "Multiple header Denial of Service vulnerability"
+ },
+ "source": {
+ "defect": [],
+ "advisory": "",
+ "discovery": "UNKNOWN"
+ },
+ "problemtype": {
+ "problemtype_data": [
+ {
+ "description": [
+ {
+ "lang": "eng",
+ "value": "Multiple header Denial of Service vulnerability"
+ }
+ ]
+ }
+ ]
+ },
+ "description": {
+ "description_data": [
+ {
+ "lang": "eng",
+ "value": "A serious problem exists when a client sends a large number of headers with the same header name. Apache uses up memory faster than the amount of memory required to simply store the received data itself. That is, memory use increases faster and faster as more headers are received, rather than increasing at a constant rate. This makes a denial of service attack based on this method more effective than methods which cause Apache to use memory at a constant rate, since the attacker has to send less data."
+ }
+ ]
+ },
+ "impact": [
+ {
+ "other": "important"
+ }
+ ],
+ "affects": {
+ "vendor": {
+ "vendor_data": [
+ {
+ "vendor_name": "Apache Software Foundation",
+ "product": {
+ "product_data": [
+ {
+ "product_name": "Apache HTTP Server",
+ "version": {
+ "version_data": [
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.1"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.0"
+ }
+ ]
+ }
+ }
+ ]
+ }
+ }
+ ]
+ }
+ }
+}
\ No newline at end of file
Added: httpd/site/trunk/content/security/json/CVE-2000-0505.json
URL: http://svn.apache.org/viewvc/httpd/site/trunk/content/security/json/CVE-2000-0505.json?rev=1888194&view=auto
==============================================================================
--- httpd/site/trunk/content/security/json/CVE-2000-0505.json (added)
+++ httpd/site/trunk/content/security/json/CVE-2000-0505.json Tue Mar 30 10:13:32 2021
@@ -0,0 +1,121 @@
+{
+ "data_type": "CVE",
+ "data_format": "MITRE",
+ "data_version": "4.0",
+ "generator": {
+ "engine": "xmltojsonmjc 1.0"
+ },
+ "references": {},
+ "timeline": [
+ {
+ "time": "2000-10-13",
+ "lang": "eng",
+ "value": "1.3.14 released"
+ }
+ ],
+ "CNA_private": {
+ "owner": "httpd"
+ },
+ "CVE_data_meta": {
+ "ASSIGNER": "security@apache.org",
+ "AKA": "",
+ "STATE": "PUBLIC",
+ "ID": "CVE-2000-0505",
+ "TITLE": "Requests can cause directory listing to be displayed on NT"
+ },
+ "source": {
+ "defect": [],
+ "advisory": "",
+ "discovery": "UNKNOWN"
+ },
+ "problemtype": {
+ "problemtype_data": [
+ {
+ "description": [
+ {
+ "lang": "eng",
+ "value": "Requests can cause directory listing to be displayed on NT"
+ }
+ ]
+ }
+ ]
+ },
+ "description": {
+ "description_data": [
+ {
+ "lang": "eng",
+ "value": "A security hole on Apache for Windows allows a user to view the listing of a directory instead of the default HTML page by sending a carefully constructed request."
+ }
+ ]
+ },
+ "impact": [
+ {
+ "other": "moderate"
+ }
+ ],
+ "affects": {
+ "vendor": {
+ "vendor_data": [
+ {
+ "vendor_name": "Apache Software Foundation",
+ "product": {
+ "product_data": [
+ {
+ "product_name": "Apache HTTP Server",
+ "version": {
+ "version_data": [
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.12"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.11"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.9"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.6"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.4"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.3"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.2"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.1"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.0"
+ }
+ ]
+ }
+ }
+ ]
+ }
+ }
+ ]
+ }
+ }
+}
\ No newline at end of file
Added: httpd/site/trunk/content/security/json/CVE-2000-0913.json
URL: http://svn.apache.org/viewvc/httpd/site/trunk/content/security/json/CVE-2000-0913.json?rev=1888194&view=auto
==============================================================================
--- httpd/site/trunk/content/security/json/CVE-2000-0913.json (added)
+++ httpd/site/trunk/content/security/json/CVE-2000-0913.json Tue Mar 30 10:13:32 2021
@@ -0,0 +1,127 @@
+{
+ "data_type": "CVE",
+ "data_format": "MITRE",
+ "data_version": "4.0",
+ "generator": {
+ "engine": "xmltojsonmjc 1.0"
+ },
+ "references": {},
+ "timeline": [
+ {
+ "time": "2000-09-29",
+ "lang": "eng",
+ "value": "public"
+ },
+ {
+ "time": "2000-10-13",
+ "lang": "eng",
+ "value": "1.3.14 released"
+ }
+ ],
+ "CNA_private": {
+ "owner": "httpd"
+ },
+ "CVE_data_meta": {
+ "ASSIGNER": "security@apache.org",
+ "AKA": "",
+ "STATE": "PUBLIC",
+ "DATE_PUBLIC": "2000-09-29",
+ "ID": "CVE-2000-0913",
+ "TITLE": "Rewrite rules that include references allow access to any file"
+ },
+ "source": {
+ "defect": [],
+ "advisory": "",
+ "discovery": "UNKNOWN"
+ },
+ "problemtype": {
+ "problemtype_data": [
+ {
+ "description": [
+ {
+ "lang": "eng",
+ "value": "Rewrite rules that include references allow access to any file"
+ }
+ ]
+ }
+ ]
+ },
+ "description": {
+ "description_data": [
+ {
+ "lang": "eng",
+ "value": "The Rewrite module, mod_rewrite, can allow access to any file on the web server. The vulnerability occurs only with certain specific cases of using regular expression references in RewriteRule directives: If the destination of a RewriteRule contains regular expression references then an attacker will be able to access any file on the server."
+ }
+ ]
+ },
+ "impact": [
+ {
+ "other": "important"
+ }
+ ],
+ "affects": {
+ "vendor": {
+ "vendor_data": [
+ {
+ "vendor_name": "Apache Software Foundation",
+ "product": {
+ "product_data": [
+ {
+ "product_name": "Apache HTTP Server",
+ "version": {
+ "version_data": [
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.12"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.11"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.9"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.6"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.4"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.3"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.2"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.1"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.0"
+ }
+ ]
+ }
+ }
+ ]
+ }
+ }
+ ]
+ }
+ }
+}
\ No newline at end of file
Added: httpd/site/trunk/content/security/json/CVE-2000-1204.json
URL: http://svn.apache.org/viewvc/httpd/site/trunk/content/security/json/CVE-2000-1204.json?rev=1888194&view=auto
==============================================================================
--- httpd/site/trunk/content/security/json/CVE-2000-1204.json (added)
+++ httpd/site/trunk/content/security/json/CVE-2000-1204.json Tue Mar 30 10:13:32 2021
@@ -0,0 +1,91 @@
+{
+ "data_type": "CVE",
+ "data_format": "MITRE",
+ "data_version": "4.0",
+ "generator": {
+ "engine": "xmltojsonmjc 1.0"
+ },
+ "references": {},
+ "timeline": [
+ {
+ "time": "2000-10-13",
+ "lang": "eng",
+ "value": "1.3.14 released"
+ }
+ ],
+ "CNA_private": {
+ "owner": "httpd"
+ },
+ "CVE_data_meta": {
+ "ASSIGNER": "security@apache.org",
+ "AKA": "",
+ "STATE": "PUBLIC",
+ "ID": "CVE-2000-1204",
+ "TITLE": "Mass virtual hosting can display CGI source"
+ },
+ "source": {
+ "defect": [],
+ "advisory": "",
+ "discovery": "UNKNOWN"
+ },
+ "problemtype": {
+ "problemtype_data": [
+ {
+ "description": [
+ {
+ "lang": "eng",
+ "value": "Mass virtual hosting can display CGI source"
+ }
+ ]
+ }
+ ]
+ },
+ "description": {
+ "description_data": [
+ {
+ "lang": "eng",
+ "value": "A security problem for users of the mass virtual hosting module, mod_vhost_alias, causes the source to a CGI to be sent if the cgi-bin directory is under the document root. However, it is not normal to have your cgi-bin directory under a document root."
+ }
+ ]
+ },
+ "impact": [
+ {
+ "other": "important"
+ }
+ ],
+ "affects": {
+ "vendor": {
+ "vendor_data": [
+ {
+ "vendor_name": "Apache Software Foundation",
+ "product": {
+ "product_data": [
+ {
+ "product_name": "Apache HTTP Server",
+ "version": {
+ "version_data": [
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.12"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.11"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.9"
+ }
+ ]
+ }
+ }
+ ]
+ }
+ }
+ ]
+ }
+ }
+}
\ No newline at end of file
Added: httpd/site/trunk/content/security/json/CVE-2000-1205.json
URL: http://svn.apache.org/viewvc/httpd/site/trunk/content/security/json/CVE-2000-1205.json?rev=1888194&view=auto
==============================================================================
--- httpd/site/trunk/content/security/json/CVE-2000-1205.json (added)
+++ httpd/site/trunk/content/security/json/CVE-2000-1205.json Tue Mar 30 10:13:32 2021
@@ -0,0 +1,116 @@
+{
+ "data_type": "CVE",
+ "data_format": "MITRE",
+ "data_version": "4.0",
+ "generator": {
+ "engine": "xmltojsonmjc 1.0"
+ },
+ "references": {},
+ "timeline": [
+ {
+ "time": "2000-02-25",
+ "lang": "eng",
+ "value": "1.3.12 released"
+ }
+ ],
+ "CNA_private": {
+ "owner": "httpd"
+ },
+ "CVE_data_meta": {
+ "ASSIGNER": "security@apache.org",
+ "AKA": "",
+ "STATE": "PUBLIC",
+ "ID": "CVE-2000-1205",
+ "TITLE": "Cross-site scripting can reveal private session information"
+ },
+ "source": {
+ "defect": [],
+ "advisory": "",
+ "discovery": "UNKNOWN"
+ },
+ "problemtype": {
+ "problemtype_data": [
+ {
+ "description": [
+ {
+ "lang": "eng",
+ "value": "Cross-site scripting can reveal private session information"
+ }
+ ]
+ }
+ ]
+ },
+ "description": {
+ "description_data": [
+ {
+ "lang": "eng",
+ "value": "Apache was vulnerable to cross site scripting issues. It was shown that malicious HTML tags can be embedded in client web requests if the server or script handling the request does not carefully encode all information displayed to the user. Using these vulnerabilities attackers could, for example, obtain copies of your private cookies used to authenticate you to other sites."
+ }
+ ]
+ },
+ "impact": [
+ {
+ "other": "important"
+ }
+ ],
+ "affects": {
+ "vendor": {
+ "vendor_data": [
+ {
+ "vendor_name": "Apache Software Foundation",
+ "product": {
+ "product_data": [
+ {
+ "product_name": "Apache HTTP Server",
+ "version": {
+ "version_data": [
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.11"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.9"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.6"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.4"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.3"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.2"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.1"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.0"
+ }
+ ]
+ }
+ }
+ ]
+ }
+ }
+ ]
+ }
+ }
+}
\ No newline at end of file
Added: httpd/site/trunk/content/security/json/CVE-2000-1206.json
URL: http://svn.apache.org/viewvc/httpd/site/trunk/content/security/json/CVE-2000-1206.json?rev=1888194&view=auto
==============================================================================
--- httpd/site/trunk/content/security/json/CVE-2000-1206.json (added)
+++ httpd/site/trunk/content/security/json/CVE-2000-1206.json Tue Mar 30 10:13:32 2021
@@ -0,0 +1,111 @@
+{
+ "data_type": "CVE",
+ "data_format": "MITRE",
+ "data_version": "4.0",
+ "generator": {
+ "engine": "xmltojsonmjc 1.0"
+ },
+ "references": {},
+ "timeline": [
+ {
+ "time": "2000-01-21",
+ "lang": "eng",
+ "value": "1.3.11 released"
+ }
+ ],
+ "CNA_private": {
+ "owner": "httpd"
+ },
+ "CVE_data_meta": {
+ "ASSIGNER": "security@apache.org",
+ "AKA": "",
+ "STATE": "PUBLIC",
+ "ID": "CVE-2000-1206",
+ "TITLE": "Mass virtual hosting security issue"
+ },
+ "source": {
+ "defect": [],
+ "advisory": "",
+ "discovery": "UNKNOWN"
+ },
+ "problemtype": {
+ "problemtype_data": [
+ {
+ "description": [
+ {
+ "lang": "eng",
+ "value": "Mass virtual hosting security issue"
+ }
+ ]
+ }
+ ]
+ },
+ "description": {
+ "description_data": [
+ {
+ "lang": "eng",
+ "value": "A security problem can occur for sites using mass name-based virtual hosting (using the new mod_vhost_alias module) or with special mod_rewrite rules."
+ }
+ ]
+ },
+ "impact": [
+ {
+ "other": "moderate"
+ }
+ ],
+ "affects": {
+ "vendor": {
+ "vendor_data": [
+ {
+ "vendor_name": "Apache Software Foundation",
+ "product": {
+ "product_data": [
+ {
+ "product_name": "Apache HTTP Server",
+ "version": {
+ "version_data": [
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.9"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.6"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.4"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.3"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.2"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.1"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.0"
+ }
+ ]
+ }
+ }
+ ]
+ }
+ }
+ ]
+ }
+ }
+}
\ No newline at end of file
Added: httpd/site/trunk/content/security/json/CVE-2001-0729.json
URL: http://svn.apache.org/viewvc/httpd/site/trunk/content/security/json/CVE-2001-0729.json?rev=1888194&view=auto
==============================================================================
--- httpd/site/trunk/content/security/json/CVE-2001-0729.json (added)
+++ httpd/site/trunk/content/security/json/CVE-2001-0729.json Tue Mar 30 10:13:32 2021
@@ -0,0 +1,92 @@
+{
+ "data_type": "CVE",
+ "data_format": "MITRE",
+ "data_version": "4.0",
+ "generator": {
+ "engine": "xmltojsonmjc 1.0"
+ },
+ "references": {},
+ "timeline": [
+ {
+ "time": "2001-09-18",
+ "lang": "eng",
+ "value": "reported"
+ },
+ {
+ "time": "2001-09-28",
+ "lang": "eng",
+ "value": "public"
+ },
+ {
+ "time": "2001-10-12",
+ "lang": "eng",
+ "value": "1.3.22 released"
+ }
+ ],
+ "CNA_private": {
+ "owner": "httpd"
+ },
+ "CVE_data_meta": {
+ "ASSIGNER": "security@apache.org",
+ "AKA": "",
+ "STATE": "PUBLIC",
+ "DATE_PUBLIC": "2001-09-28",
+ "ID": "CVE-2001-0729",
+ "TITLE": "Requests can cause directory listing to be displayed"
+ },
+ "source": {
+ "defect": [],
+ "advisory": "",
+ "discovery": "UNKNOWN"
+ },
+ "problemtype": {
+ "problemtype_data": [
+ {
+ "description": [
+ {
+ "lang": "eng",
+ "value": "Requests can cause directory listing to be displayed"
+ }
+ ]
+ }
+ ]
+ },
+ "description": {
+ "description_data": [
+ {
+ "lang": "eng",
+ "value": "A vulnerability was found in the Win32 port of Apache 1.3.20. A client submitting a very long URI could cause a directory listing to be returned rather than the default index page."
+ }
+ ]
+ },
+ "impact": [
+ {
+ "other": "important"
+ }
+ ],
+ "affects": {
+ "vendor": {
+ "vendor_data": [
+ {
+ "vendor_name": "Apache Software Foundation",
+ "product": {
+ "product_data": [
+ {
+ "product_name": "Apache HTTP Server",
+ "version": {
+ "version_data": [
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.20"
+ }
+ ]
+ }
+ }
+ ]
+ }
+ }
+ ]
+ }
+ }
+}
\ No newline at end of file
Added: httpd/site/trunk/content/security/json/CVE-2001-0730.json
URL: http://svn.apache.org/viewvc/httpd/site/trunk/content/security/json/CVE-2001-0730.json?rev=1888194&view=auto
==============================================================================
--- httpd/site/trunk/content/security/json/CVE-2001-0730.json (added)
+++ httpd/site/trunk/content/security/json/CVE-2001-0730.json Tue Mar 30 10:13:32 2021
@@ -0,0 +1,147 @@
+{
+ "data_type": "CVE",
+ "data_format": "MITRE",
+ "data_version": "4.0",
+ "generator": {
+ "engine": "xmltojsonmjc 1.0"
+ },
+ "references": {},
+ "timeline": [
+ {
+ "time": "2001-09-28",
+ "lang": "eng",
+ "value": "public"
+ },
+ {
+ "time": "2001-10-12",
+ "lang": "eng",
+ "value": "1.3.22 released"
+ }
+ ],
+ "CNA_private": {
+ "owner": "httpd"
+ },
+ "CVE_data_meta": {
+ "ASSIGNER": "security@apache.org",
+ "AKA": "",
+ "STATE": "PUBLIC",
+ "DATE_PUBLIC": "2001-09-28",
+ "ID": "CVE-2001-0730",
+ "TITLE": "split-logfile can cause arbitrary log files to be written to"
+ },
+ "source": {
+ "defect": [],
+ "advisory": "",
+ "discovery": "UNKNOWN"
+ },
+ "problemtype": {
+ "problemtype_data": [
+ {
+ "description": [
+ {
+ "lang": "eng",
+ "value": "split-logfile can cause arbitrary log files to be written to"
+ }
+ ]
+ }
+ ]
+ },
+ "description": {
+ "description_data": [
+ {
+ "lang": "eng",
+ "value": "A vulnerability was found in the split-logfile support program. A request with a specially crafted Host: header could allow any file with a .log extension on the system to be written to."
+ }
+ ]
+ },
+ "impact": [
+ {
+ "other": "moderate"
+ }
+ ],
+ "affects": {
+ "vendor": {
+ "vendor_data": [
+ {
+ "vendor_name": "Apache Software Foundation",
+ "product": {
+ "product_data": [
+ {
+ "product_name": "Apache HTTP Server",
+ "version": {
+ "version_data": [
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.20"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.19"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.17"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.14"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.12"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.11"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.9"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.6"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.4"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.3"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.2"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.1"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.0"
+ }
+ ]
+ }
+ }
+ ]
+ }
+ }
+ ]
+ }
+ }
+}
\ No newline at end of file
Added: httpd/site/trunk/content/security/json/CVE-2001-0731.json
URL: http://svn.apache.org/viewvc/httpd/site/trunk/content/security/json/CVE-2001-0731.json?rev=1888194&view=auto
==============================================================================
--- httpd/site/trunk/content/security/json/CVE-2001-0731.json (added)
+++ httpd/site/trunk/content/security/json/CVE-2001-0731.json Tue Mar 30 10:13:32 2021
@@ -0,0 +1,147 @@
+{
+ "data_type": "CVE",
+ "data_format": "MITRE",
+ "data_version": "4.0",
+ "generator": {
+ "engine": "xmltojsonmjc 1.0"
+ },
+ "references": {},
+ "timeline": [
+ {
+ "time": "2001-07-09",
+ "lang": "eng",
+ "value": "public"
+ },
+ {
+ "time": "2001-10-12",
+ "lang": "eng",
+ "value": "1.3.22 released"
+ }
+ ],
+ "CNA_private": {
+ "owner": "httpd"
+ },
+ "CVE_data_meta": {
+ "ASSIGNER": "security@apache.org",
+ "AKA": "",
+ "STATE": "PUBLIC",
+ "DATE_PUBLIC": "2001-07-09",
+ "ID": "CVE-2001-0731",
+ "TITLE": "Multiviews can cause a directory listing to be displayed"
+ },
+ "source": {
+ "defect": [],
+ "advisory": "",
+ "discovery": "UNKNOWN"
+ },
+ "problemtype": {
+ "problemtype_data": [
+ {
+ "description": [
+ {
+ "lang": "eng",
+ "value": "Multiviews can cause a directory listing to be displayed"
+ }
+ ]
+ }
+ ]
+ },
+ "description": {
+ "description_data": [
+ {
+ "lang": "eng",
+ "value": "A vulnerability was found when Multiviews are used to negotiate the directory index. In some configurations, requesting a URI with a QUERY_STRING of M=D could return a directory listing rather than the expected index page."
+ }
+ ]
+ },
+ "impact": [
+ {
+ "other": "important"
+ }
+ ],
+ "affects": {
+ "vendor": {
+ "vendor_data": [
+ {
+ "vendor_name": "Apache Software Foundation",
+ "product": {
+ "product_data": [
+ {
+ "product_name": "Apache HTTP Server",
+ "version": {
+ "version_data": [
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.20"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.19"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.17"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.14"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.12"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.11"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.9"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.6"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.4"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.3"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.2"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.1"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.0"
+ }
+ ]
+ }
+ }
+ ]
+ }
+ }
+ ]
+ }
+ }
+}
\ No newline at end of file
Added: httpd/site/trunk/content/security/json/CVE-2001-0925.json
URL: http://svn.apache.org/viewvc/httpd/site/trunk/content/security/json/CVE-2001-0925.json?rev=1888194&view=auto
==============================================================================
--- httpd/site/trunk/content/security/json/CVE-2001-0925.json (added)
+++ httpd/site/trunk/content/security/json/CVE-2001-0925.json Tue Mar 30 10:13:32 2021
@@ -0,0 +1,96 @@
+{
+ "data_type": "CVE",
+ "data_format": "MITRE",
+ "data_version": "4.0",
+ "generator": {
+ "engine": "xmltojsonmjc 1.0"
+ },
+ "references": {},
+ "timeline": [
+ {
+ "time": "2001-02-28",
+ "lang": "eng",
+ "value": "1.3.19 released"
+ }
+ ],
+ "CNA_private": {
+ "owner": "httpd"
+ },
+ "CVE_data_meta": {
+ "ASSIGNER": "security@apache.org",
+ "AKA": "",
+ "STATE": "PUBLIC",
+ "ID": "CVE-2001-0925",
+ "TITLE": "Requests can cause directory listing to be displayed"
+ },
+ "source": {
+ "defect": [],
+ "advisory": "",
+ "discovery": "UNKNOWN"
+ },
+ "problemtype": {
+ "problemtype_data": [
+ {
+ "description": [
+ {
+ "lang": "eng",
+ "value": "Requests can cause directory listing to be displayed"
+ }
+ ]
+ }
+ ]
+ },
+ "description": {
+ "description_data": [
+ {
+ "lang": "eng",
+ "value": "The default installation can lead mod_negotiation and mod_dir or mod_autoindex to display a directory listing instead of the multiview index.html file if a very long path was created artificially by using many slashes."
+ }
+ ]
+ },
+ "impact": [
+ {
+ "other": "important"
+ }
+ ],
+ "affects": {
+ "vendor": {
+ "vendor_data": [
+ {
+ "vendor_name": "Apache Software Foundation",
+ "product": {
+ "product_data": [
+ {
+ "product_name": "Apache HTTP Server",
+ "version": {
+ "version_data": [
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.17"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.14"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.12"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.11"
+ }
+ ]
+ }
+ }
+ ]
+ }
+ }
+ ]
+ }
+ }
+}
\ No newline at end of file
Added: httpd/site/trunk/content/security/json/CVE-2001-1342.json
URL: http://svn.apache.org/viewvc/httpd/site/trunk/content/security/json/CVE-2001-1342.json?rev=1888194&view=auto
==============================================================================
--- httpd/site/trunk/content/security/json/CVE-2001-1342.json (added)
+++ httpd/site/trunk/content/security/json/CVE-2001-1342.json Tue Mar 30 10:13:32 2021
@@ -0,0 +1,141 @@
+{
+ "data_type": "CVE",
+ "data_format": "MITRE",
+ "data_version": "4.0",
+ "generator": {
+ "engine": "xmltojsonmjc 1.0"
+ },
+ "references": {},
+ "timeline": [
+ {
+ "time": "2001-05-22",
+ "lang": "eng",
+ "value": "1.3.20 released"
+ }
+ ],
+ "CNA_private": {
+ "owner": "httpd"
+ },
+ "CVE_data_meta": {
+ "ASSIGNER": "security@apache.org",
+ "AKA": "",
+ "STATE": "PUBLIC",
+ "ID": "CVE-2001-1342",
+ "TITLE": "Denial of service attack on Win32 and OS2"
+ },
+ "source": {
+ "defect": [],
+ "advisory": "",
+ "discovery": "UNKNOWN"
+ },
+ "problemtype": {
+ "problemtype_data": [
+ {
+ "description": [
+ {
+ "lang": "eng",
+ "value": "Denial of service attack on Win32 and OS2"
+ }
+ ]
+ }
+ ]
+ },
+ "description": {
+ "description_data": [
+ {
+ "lang": "eng",
+ "value": "A vulnerability was found in the Win32 and OS2 ports of Apache 1.3. A client submitting a carefully constructed URI could cause a General Protection Fault in a child process, bringing up a message box which would have to be cleared by the operator to resume operation. This vulnerability introduced no identified means to compromise the server other than introducing a possible denial of service."
+ }
+ ]
+ },
+ "impact": [
+ {
+ "other": "important"
+ }
+ ],
+ "affects": {
+ "vendor": {
+ "vendor_data": [
+ {
+ "vendor_name": "Apache Software Foundation",
+ "product": {
+ "product_data": [
+ {
+ "product_name": "Apache HTTP Server",
+ "version": {
+ "version_data": [
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.20"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.19"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.17"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.14"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.12"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.11"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.9"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.6"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.4"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.3"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.2"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.1"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.0"
+ }
+ ]
+ }
+ }
+ ]
+ }
+ }
+ ]
+ }
+ }
+}
\ No newline at end of file
Added: httpd/site/trunk/content/security/json/CVE-2002-0061.json
URL: http://svn.apache.org/viewvc/httpd/site/trunk/content/security/json/CVE-2002-0061.json?rev=1888194&view=auto
==============================================================================
--- httpd/site/trunk/content/security/json/CVE-2002-0061.json (added)
+++ httpd/site/trunk/content/security/json/CVE-2002-0061.json Tue Mar 30 10:13:32 2021
@@ -0,0 +1,151 @@
+{
+ "data_type": "CVE",
+ "data_format": "MITRE",
+ "data_version": "4.0",
+ "generator": {
+ "engine": "xmltojsonmjc 1.0"
+ },
+ "references": {},
+ "timeline": [
+ {
+ "time": "2002-02-13",
+ "lang": "eng",
+ "value": "reported"
+ },
+ {
+ "time": "2002-03-22",
+ "lang": "eng",
+ "value": "1.3.24 released"
+ }
+ ],
+ "CNA_private": {
+ "owner": "httpd"
+ },
+ "CVE_data_meta": {
+ "ASSIGNER": "security@apache.org",
+ "AKA": "",
+ "STATE": "PUBLIC",
+ "ID": "CVE-2002-0061",
+ "TITLE": "Win32 Apache Remote command execution"
+ },
+ "source": {
+ "defect": [],
+ "advisory": "",
+ "discovery": "UNKNOWN"
+ },
+ "problemtype": {
+ "problemtype_data": [
+ {
+ "description": [
+ {
+ "lang": "eng",
+ "value": "Win32 Apache Remote command execution"
+ }
+ ]
+ }
+ ]
+ },
+ "description": {
+ "description_data": [
+ {
+ "lang": "eng",
+ "value": "Apache for Win32 before 1.3.24 and 2.0.34-beta allows remote attackers to execute arbitrary commands via parameters passed to batch file CGI scripts."
+ }
+ ]
+ },
+ "impact": [
+ {
+ "other": "critical"
+ }
+ ],
+ "affects": {
+ "vendor": {
+ "vendor_data": [
+ {
+ "vendor_name": "Apache Software Foundation",
+ "product": {
+ "product_data": [
+ {
+ "product_name": "Apache HTTP Server",
+ "version": {
+ "version_data": [
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.22"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.20"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.19"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.17"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.14"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.12"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.11"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.9"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.6"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.4"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.3"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.2"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.1"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "?=",
+ "version_value": "1.3.0"
+ }
+ ]
+ }
+ }
+ ]
+ }
+ }
+ ]
+ }
+ }
+}
\ No newline at end of file
Added: httpd/site/trunk/content/security/json/CVE-2002-0392.json
URL: http://svn.apache.org/viewvc/httpd/site/trunk/content/security/json/CVE-2002-0392.json?rev=1888194&view=auto
==============================================================================
--- httpd/site/trunk/content/security/json/CVE-2002-0392.json (added)
+++ httpd/site/trunk/content/security/json/CVE-2002-0392.json Tue Mar 30 10:13:32 2021
@@ -0,0 +1,177 @@
+{
+ "data_type": "CVE",
+ "data_format": "MITRE",
+ "data_version": "4.0",
+ "generator": {
+ "engine": "xmltojsonmjc 1.0"
+ },
+ "references": {},
+ "timeline": [
+ {
+ "time": "2002-05-27",
+ "lang": "eng",
+ "value": "reported"
+ },
+ {
+ "time": "2002-06-17",
+ "lang": "eng",
+ "value": "public"
+ },
+ {
+ "time": "2002-06-18",
+ "lang": "eng",
+ "value": "2.0.37 released"
+ },
+ {
+ "time": "2002-06-18",
+ "lang": "eng",
+ "value": "1.3.26 released"
+ }
+ ],
+ "CNA_private": {
+ "owner": "httpd"
+ },
+ "CVE_data_meta": {
+ "ASSIGNER": "security@apache.org",
+ "AKA": "",
+ "STATE": "PUBLIC",
+ "DATE_PUBLIC": "2002-06-17",
+ "ID": "CVE-2002-0392",
+ "TITLE": "Apache Chunked encoding vulnerability"
+ },
+ "source": {
+ "defect": [],
+ "advisory": "",
+ "discovery": "UNKNOWN"
+ },
+ "problemtype": {
+ "problemtype_data": [
+ {
+ "description": [
+ {
+ "lang": "eng",
+ "value": "Apache Chunked encoding vulnerability"
+ }
+ ]
+ }
+ ]
+ },
+ "description": {
+ "description_data": [
+ {
+ "lang": "eng",
+ "value": "Malicious requests can cause various effects ranging from a relatively harmless increase in system resources through to denial of service attacks and in some cases the ability to execute arbitrary remote code."
+ }
+ ]
+ },
+ "impact": [
+ {
+ "other": "critical"
+ }
+ ],
+ "affects": {
+ "vendor": {
+ "vendor_data": [
+ {
+ "vendor_name": "Apache Software Foundation",
+ "product": {
+ "product_data": [
+ {
+ "product_name": "Apache HTTP Server",
+ "version": {
+ "version_data": [
+ {
+ "version_name": "2.0",
+ "version_affected": "=",
+ "version_value": "2.0.36"
+ },
+ {
+ "version_name": "2.0",
+ "version_affected": "=",
+ "version_value": "2.0.35"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.24"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.22"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.20"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.19"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.17"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.14"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.12"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.11"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.9"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.6"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.4"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.3"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.2"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.1"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.0"
+ }
+ ]
+ }
+ }
+ ]
+ }
+ }
+ ]
+ }
+ }
+}
\ No newline at end of file
Added: httpd/site/trunk/content/security/json/CVE-2002-0654.json
URL: http://svn.apache.org/viewvc/httpd/site/trunk/content/security/json/CVE-2002-0654.json?rev=1888194&view=auto
==============================================================================
--- httpd/site/trunk/content/security/json/CVE-2002-0654.json (added)
+++ httpd/site/trunk/content/security/json/CVE-2002-0654.json Tue Mar 30 10:13:32 2021
@@ -0,0 +1,107 @@
+{
+ "data_type": "CVE",
+ "data_format": "MITRE",
+ "data_version": "4.0",
+ "generator": {
+ "engine": "xmltojsonmjc 1.0"
+ },
+ "references": {},
+ "timeline": [
+ {
+ "time": "2002-07-05",
+ "lang": "eng",
+ "value": "reported"
+ },
+ {
+ "time": "2002-08-09",
+ "lang": "eng",
+ "value": "public"
+ },
+ {
+ "time": "2002-08-09",
+ "lang": "eng",
+ "value": "2.0.40 released"
+ }
+ ],
+ "CNA_private": {
+ "owner": "httpd"
+ },
+ "CVE_data_meta": {
+ "ASSIGNER": "security@apache.org",
+ "AKA": "",
+ "STATE": "PUBLIC",
+ "DATE_PUBLIC": "2002-08-09",
+ "ID": "CVE-2002-0654",
+ "TITLE": "Path revealing exposures"
+ },
+ "source": {
+ "defect": [],
+ "advisory": "",
+ "discovery": "UNKNOWN"
+ },
+ "problemtype": {
+ "problemtype_data": [
+ {
+ "description": [
+ {
+ "lang": "eng",
+ "value": "Path revealing exposures"
+ }
+ ]
+ }
+ ]
+ },
+ "description": {
+ "description_data": [
+ {
+ "lang": "eng",
+ "value": "A path-revealing exposure was present in multiview type map negotiation (such as the default error documents) where a module would report the full path of the typemapped .var file when multiple documents or no documents could be served. Additionally a path-revealing exposure in cgi/cgid when Apache fails to invoke a script. The modules would report \"couldn't create child process /path-to-script/script.pl\" revealing the full path of the script."
+ }
+ ]
+ },
+ "impact": [
+ {
+ "other": "low"
+ }
+ ],
+ "affects": {
+ "vendor": {
+ "vendor_data": [
+ {
+ "vendor_name": "Apache Software Foundation",
+ "product": {
+ "product_data": [
+ {
+ "product_name": "Apache HTTP Server",
+ "version": {
+ "version_data": [
+ {
+ "version_name": "2.0",
+ "version_affected": "=",
+ "version_value": "2.0.39"
+ },
+ {
+ "version_name": "2.0",
+ "version_affected": "?=",
+ "version_value": "2.0.37"
+ },
+ {
+ "version_name": "2.0",
+ "version_affected": "?=",
+ "version_value": "2.0.36"
+ },
+ {
+ "version_name": "2.0",
+ "version_affected": "?=",
+ "version_value": "2.0.35"
+ }
+ ]
+ }
+ }
+ ]
+ }
+ }
+ ]
+ }
+ }
+}
\ No newline at end of file
Added: httpd/site/trunk/content/security/json/CVE-2002-0661.json
URL: http://svn.apache.org/viewvc/httpd/site/trunk/content/security/json/CVE-2002-0661.json?rev=1888194&view=auto
==============================================================================
--- httpd/site/trunk/content/security/json/CVE-2002-0661.json (added)
+++ httpd/site/trunk/content/security/json/CVE-2002-0661.json Tue Mar 30 10:13:32 2021
@@ -0,0 +1,107 @@
+{
+ "data_type": "CVE",
+ "data_format": "MITRE",
+ "data_version": "4.0",
+ "generator": {
+ "engine": "xmltojsonmjc 1.0"
+ },
+ "references": {},
+ "timeline": [
+ {
+ "time": "2002-08-07",
+ "lang": "eng",
+ "value": "reported"
+ },
+ {
+ "time": "2002-08-09",
+ "lang": "eng",
+ "value": "public"
+ },
+ {
+ "time": "2002-08-09",
+ "lang": "eng",
+ "value": "2.0.40 released"
+ }
+ ],
+ "CNA_private": {
+ "owner": "httpd"
+ },
+ "CVE_data_meta": {
+ "ASSIGNER": "security@apache.org",
+ "AKA": "",
+ "STATE": "PUBLIC",
+ "DATE_PUBLIC": "2002-08-09",
+ "ID": "CVE-2002-0661",
+ "TITLE": "Path vulnerability"
+ },
+ "source": {
+ "defect": [],
+ "advisory": "",
+ "discovery": "UNKNOWN"
+ },
+ "problemtype": {
+ "problemtype_data": [
+ {
+ "description": [
+ {
+ "lang": "eng",
+ "value": "Path vulnerability"
+ }
+ ]
+ }
+ ]
+ },
+ "description": {
+ "description_data": [
+ {
+ "lang": "eng",
+ "value": "Certain URIs would bypass security and allow users to invoke or access any file depending on the system configuration. Affects Windows, OS2, Netware and Cygwin platforms only."
+ }
+ ]
+ },
+ "impact": [
+ {
+ "other": "important"
+ }
+ ],
+ "affects": {
+ "vendor": {
+ "vendor_data": [
+ {
+ "vendor_name": "Apache Software Foundation",
+ "product": {
+ "product_data": [
+ {
+ "product_name": "Apache HTTP Server",
+ "version": {
+ "version_data": [
+ {
+ "version_name": "2.0",
+ "version_affected": "=",
+ "version_value": "2.0.39"
+ },
+ {
+ "version_name": "2.0",
+ "version_affected": "=",
+ "version_value": "2.0.37"
+ },
+ {
+ "version_name": "2.0",
+ "version_affected": "=",
+ "version_value": "2.0.36"
+ },
+ {
+ "version_name": "2.0",
+ "version_affected": "=",
+ "version_value": "2.0.35"
+ }
+ ]
+ }
+ }
+ ]
+ }
+ }
+ ]
+ }
+ }
+}
\ No newline at end of file
Added: httpd/site/trunk/content/security/json/CVE-2002-0839.json
URL: http://svn.apache.org/viewvc/httpd/site/trunk/content/security/json/CVE-2002-0839.json?rev=1888194&view=auto
==============================================================================
--- httpd/site/trunk/content/security/json/CVE-2002-0839.json (added)
+++ httpd/site/trunk/content/security/json/CVE-2002-0839.json Tue Mar 30 10:13:32 2021
@@ -0,0 +1,167 @@
+{
+ "data_type": "CVE",
+ "data_format": "MITRE",
+ "data_version": "4.0",
+ "generator": {
+ "engine": "xmltojsonmjc 1.0"
+ },
+ "references": {},
+ "timeline": [
+ {
+ "time": "2001-11-11",
+ "lang": "eng",
+ "value": "reported"
+ },
+ {
+ "time": "2002-10-03",
+ "lang": "eng",
+ "value": "public"
+ },
+ {
+ "time": "2002-10-03",
+ "lang": "eng",
+ "value": "1.3.27 released"
+ }
+ ],
+ "CNA_private": {
+ "owner": "httpd"
+ },
+ "CVE_data_meta": {
+ "ASSIGNER": "security@apache.org",
+ "AKA": "",
+ "STATE": "PUBLIC",
+ "DATE_PUBLIC": "2002-10-03",
+ "ID": "CVE-2002-0839",
+ "TITLE": "Shared memory permissions lead to local privilege escalation"
+ },
+ "source": {
+ "defect": [],
+ "advisory": "",
+ "discovery": "UNKNOWN"
+ },
+ "problemtype": {
+ "problemtype_data": [
+ {
+ "description": [
+ {
+ "lang": "eng",
+ "value": "Shared memory permissions lead to local privilege escalation"
+ }
+ ]
+ }
+ ]
+ },
+ "description": {
+ "description_data": [
+ {
+ "lang": "eng",
+ "value": "The permissions of the shared memory used for the scoreboard allows an attacker who can execute under the Apache UID to send a signal to any process as root or cause a local denial of service attack."
+ }
+ ]
+ },
+ "impact": [
+ {
+ "other": "important"
+ }
+ ],
+ "affects": {
+ "vendor": {
+ "vendor_data": [
+ {
+ "vendor_name": "Apache Software Foundation",
+ "product": {
+ "product_data": [
+ {
+ "product_name": "Apache HTTP Server",
+ "version": {
+ "version_data": [
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.26"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.24"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.22"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.20"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.19"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.17"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.14"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.12"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.11"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.9"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.6"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.4"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.3"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.2"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.1"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.0"
+ }
+ ]
+ }
+ }
+ ]
+ }
+ }
+ ]
+ }
+ }
+}
\ No newline at end of file
Added: httpd/site/trunk/content/security/json/CVE-2002-0840.json
URL: http://svn.apache.org/viewvc/httpd/site/trunk/content/security/json/CVE-2002-0840.json?rev=1888194&view=auto
==============================================================================
--- httpd/site/trunk/content/security/json/CVE-2002-0840.json (added)
+++ httpd/site/trunk/content/security/json/CVE-2002-0840.json Tue Mar 30 10:13:32 2021
@@ -0,0 +1,202 @@
+{
+ "data_type": "CVE",
+ "data_format": "MITRE",
+ "data_version": "4.0",
+ "generator": {
+ "engine": "xmltojsonmjc 1.0"
+ },
+ "references": {},
+ "timeline": [
+ {
+ "time": "2002-09-20",
+ "lang": "eng",
+ "value": "reported"
+ },
+ {
+ "time": "2002-10-02",
+ "lang": "eng",
+ "value": "public"
+ },
+ {
+ "time": "2002-10-03",
+ "lang": "eng",
+ "value": "2.0.43 released"
+ },
+ {
+ "time": "2002-10-03",
+ "lang": "eng",
+ "value": "1.3.27 released"
+ }
+ ],
+ "CNA_private": {
+ "owner": "httpd"
+ },
+ "CVE_data_meta": {
+ "ASSIGNER": "security@apache.org",
+ "AKA": "",
+ "STATE": "PUBLIC",
+ "DATE_PUBLIC": "2002-10-02",
+ "ID": "CVE-2002-0840",
+ "TITLE": "Error page XSS using wildcard DNS"
+ },
+ "source": {
+ "defect": [],
+ "advisory": "",
+ "discovery": "UNKNOWN"
+ },
+ "problemtype": {
+ "problemtype_data": [
+ {
+ "description": [
+ {
+ "lang": "eng",
+ "value": "Error page XSS using wildcard DNS"
+ }
+ ]
+ }
+ ]
+ },
+ "description": {
+ "description_data": [
+ {
+ "lang": "eng",
+ "value": "Cross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when UseCanonicalName is \"Off\" and support for wildcard DNS is present, allows remote attackers to execute script as other web page visitors via the Host: header."
+ }
+ ]
+ },
+ "impact": [
+ {
+ "other": "low"
+ }
+ ],
+ "affects": {
+ "vendor": {
+ "vendor_data": [
+ {
+ "vendor_name": "Apache Software Foundation",
+ "product": {
+ "product_data": [
+ {
+ "product_name": "Apache HTTP Server",
+ "version": {
+ "version_data": [
+ {
+ "version_name": "2.0",
+ "version_affected": "=",
+ "version_value": "2.0.42"
+ },
+ {
+ "version_name": "2.0",
+ "version_affected": "=",
+ "version_value": "2.0.40"
+ },
+ {
+ "version_name": "2.0",
+ "version_affected": "=",
+ "version_value": "2.0.39"
+ },
+ {
+ "version_name": "2.0",
+ "version_affected": "=",
+ "version_value": "2.0.37"
+ },
+ {
+ "version_name": "2.0",
+ "version_affected": "=",
+ "version_value": "2.0.36"
+ },
+ {
+ "version_name": "2.0",
+ "version_affected": "=",
+ "version_value": "2.0.35"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.26"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.24"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.22"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.20"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.19"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.17"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.14"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.12"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.11"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.9"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.6"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.4"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.3"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.2"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.1"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.0"
+ }
+ ]
+ }
+ }
+ ]
+ }
+ }
+ ]
+ }
+ }
+}
\ No newline at end of file
Added: httpd/site/trunk/content/security/json/CVE-2002-0843.json
URL: http://svn.apache.org/viewvc/httpd/site/trunk/content/security/json/CVE-2002-0843.json?rev=1888194&view=auto
==============================================================================
--- httpd/site/trunk/content/security/json/CVE-2002-0843.json (added)
+++ httpd/site/trunk/content/security/json/CVE-2002-0843.json Tue Mar 30 10:13:32 2021
@@ -0,0 +1,167 @@
+{
+ "data_type": "CVE",
+ "data_format": "MITRE",
+ "data_version": "4.0",
+ "generator": {
+ "engine": "xmltojsonmjc 1.0"
+ },
+ "references": {},
+ "timeline": [
+ {
+ "time": "2002-09-23",
+ "lang": "eng",
+ "value": "reported"
+ },
+ {
+ "time": "2002-10-03",
+ "lang": "eng",
+ "value": "public"
+ },
+ {
+ "time": "2002-10-03",
+ "lang": "eng",
+ "value": "1.3.27 released"
+ }
+ ],
+ "CNA_private": {
+ "owner": "httpd"
+ },
+ "CVE_data_meta": {
+ "ASSIGNER": "security@apache.org",
+ "AKA": "",
+ "STATE": "PUBLIC",
+ "DATE_PUBLIC": "2002-10-03",
+ "ID": "CVE-2002-0843",
+ "TITLE": "Buffer overflows in ab utility"
+ },
+ "source": {
+ "defect": [],
+ "advisory": "",
+ "discovery": "UNKNOWN"
+ },
+ "problemtype": {
+ "problemtype_data": [
+ {
+ "description": [
+ {
+ "lang": "eng",
+ "value": "Buffer overflows in ab utility"
+ }
+ ]
+ }
+ ]
+ },
+ "description": {
+ "description_data": [
+ {
+ "lang": "eng",
+ "value": "Buffer overflows in the benchmarking utility ab could be exploited if ab is run against a malicious server"
+ }
+ ]
+ },
+ "impact": [
+ {
+ "other": "important"
+ }
+ ],
+ "affects": {
+ "vendor": {
+ "vendor_data": [
+ {
+ "vendor_name": "Apache Software Foundation",
+ "product": {
+ "product_data": [
+ {
+ "product_name": "Apache HTTP Server",
+ "version": {
+ "version_data": [
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.26"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.24"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.22"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.20"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.19"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.17"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.14"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.12"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.11"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.9"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.6"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.4"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.3"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.2"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.1"
+ },
+ {
+ "version_name": "1.3",
+ "version_affected": "=",
+ "version_value": "1.3.0"
+ }
+ ]
+ }
+ }
+ ]
+ }
+ }
+ ]
+ }
+ }
+}
\ No newline at end of file
Added: httpd/site/trunk/content/security/json/CVE-2002-1156.json
URL: http://svn.apache.org/viewvc/httpd/site/trunk/content/security/json/CVE-2002-1156.json?rev=1888194&view=auto
==============================================================================
--- httpd/site/trunk/content/security/json/CVE-2002-1156.json (added)
+++ httpd/site/trunk/content/security/json/CVE-2002-1156.json Tue Mar 30 10:13:32 2021
@@ -0,0 +1,81 @@
+{
+ "data_type": "CVE",
+ "data_format": "MITRE",
+ "data_version": "4.0",
+ "generator": {
+ "engine": "xmltojsonmjc 1.0"
+ },
+ "references": {},
+ "timeline": [
+ {
+ "time": "2002-10-03",
+ "lang": "eng",
+ "value": "2.0.43 released"
+ }
+ ],
+ "CNA_private": {
+ "owner": "httpd"
+ },
+ "CVE_data_meta": {
+ "ASSIGNER": "security@apache.org",
+ "AKA": "",
+ "STATE": "PUBLIC",
+ "ID": "CVE-2002-1156",
+ "TITLE": "CGI scripts source revealed using WebDAV"
+ },
+ "source": {
+ "defect": [],
+ "advisory": "",
+ "discovery": "UNKNOWN"
+ },
+ "problemtype": {
+ "problemtype_data": [
+ {
+ "description": [
+ {
+ "lang": "eng",
+ "value": "CGI scripts source revealed using WebDAV"
+ }
+ ]
+ }
+ ]
+ },
+ "description": {
+ "description_data": [
+ {
+ "lang": "eng",
+ "value": "In Apache 2.0.42 only, for a location where both WebDAV and CGI were enabled, a POST request to a CGI script would reveal the CGI source to a remote user."
+ }
+ ]
+ },
+ "impact": [
+ {
+ "other": "moderate"
+ }
+ ],
+ "affects": {
+ "vendor": {
+ "vendor_data": [
+ {
+ "vendor_name": "Apache Software Foundation",
+ "product": {
+ "product_data": [
+ {
+ "product_name": "Apache HTTP Server",
+ "version": {
+ "version_data": [
+ {
+ "version_name": "2.0",
+ "version_affected": "=",
+ "version_value": "2.0.42"
+ }
+ ]
+ }
+ }
+ ]
+ }
+ }
+ ]
+ }
+ }
+}
\ No newline at end of file