CVE-2006-3747 : Detail

Off-by-one error in the ldap scheme handling in the Rewrite module (mod_rewrite) in Apache 1.3 from 1.3.28, 2.0.46 and other versions before 2.0.59, and 2.2, when RewriteEngine is enabled, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted URLs that are not properly handled using certain rewrite rules.

Related Weaknesses

Metrics

EPSS

EPSS Score

EPSS Percentile

Exploit information

Exploit Database EDB-ID : 2237

Publication date : 2006-08-20 22h00 +00:00
Author : Jacobo Avariento
EDB Verified : Yes

Exploit Database EDB-ID : 3996

Publication date : 2007-05-25 22h00 +00:00
Author : fabio/b0x
EDB Verified : Yes

Exploit Database EDB-ID : 16752

Publication date : 2010-02-14 23h00 +00:00
Author : Metasploit
EDB Verified : Yes

Exploit Database EDB-ID : 3680

Publication date : 2007-04-06 22h00 +00:00
Author : axis
EDB Verified : Yes

Products Mentioned

Configuraton 0

Apache>>Http_server >> Version From (including) 1.3.28 To (excluding) 1.3.37

Apache>>Http_server >> Version From (including) 2.0.46 To (excluding) 2.0.59

Apache>>Http_server >> Version From (including) 2.2.0 To (excluding) 2.2.3

Configuraton 0

Canonical>>Ubuntu_linux >> Version 5.04

Canonical>>Ubuntu_linux >> Version 5.10

Canonical>>Ubuntu_linux >> Version 6.06

Configuraton 0

Debian>>Debian_linux >> Version 3.1

References