CVE-2009-1955

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2009-1955
The expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7, as used in the mod_dav and mod_dav_svn modules in the Apache HTTP Server, allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document containing a large number of nested entity references, as demonstrated by a PROPFIND request, a similar issue to CVE-2003-1564.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References
Link Resource
http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html Mailing List Third Party Advisory
http://marc.info/?l=apr-dev&m=124396021826125&w=2 Mailing List Patch
http://marc.info/?l=bugtraq&m=129190899612998&w=2 Mailing List
http://marc.info/?l=bugtraq&m=129190899612998&w=2 Mailing List
http://secunia.com/advisories/34724 Broken Link Third Party Advisory
http://secunia.com/advisories/35284 Broken Link Third Party Advisory
http://secunia.com/advisories/35360 Broken Link Third Party Advisory
http://secunia.com/advisories/35395 Broken Link Third Party Advisory
http://secunia.com/advisories/35444 Broken Link Third Party Advisory
http://secunia.com/advisories/35487 Broken Link Third Party Advisory
http://secunia.com/advisories/35565 Broken Link Third Party Advisory
http://secunia.com/advisories/35710 Broken Link Third Party Advisory
http://secunia.com/advisories/35797 Broken Link Third Party Advisory
http://secunia.com/advisories/35843 Broken Link Third Party Advisory
http://secunia.com/advisories/36473 Broken Link Third Party Advisory
http://secunia.com/advisories/37221 Broken Link Third Party Advisory
http://security.gentoo.org/glsa/glsa-200907-03.xml Third Party Advisory
http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.538210 Broken Link Third Party Advisory
http://support.apple.com/kb/HT3937 Broken Link
http://svn.apache.org/viewvc?view=rev&revision=781403 Patch
http://wiki.rpath.com/Advisories:rPSA-2009-0123 Broken Link
http://www-01.ibm.com/support/docview.wss?uid=swg1PK88342 Broken Link
http://www-01.ibm.com/support/docview.wss?uid=swg1PK91241 Broken Link Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1PK99478 Broken Link Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg27014463 Broken Link Third Party Advisory
http://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.3 Broken Link
http://www.debian.org/security/2009/dsa-1812 Mailing List Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2009:131 Broken Link Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 Broken Link Third Party Advisory
http://www.openwall.com/lists/oss-security/2009/06/03/4 Mailing List
http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html Patch Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2009-1107.html Broken Link Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2009-1108.html Broken Link Third Party Advisory
http://www.securityfocus.com/archive/1/506053/100/0/threaded Broken Link Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/35253 Broken Link Third Party Advisory VDB Entry
http://www.ubuntu.com/usn/usn-786-1 Third Party Advisory
http://www.ubuntu.com/usn/usn-787-1 Third Party Advisory
http://www.vupen.com/english/advisories/2009/1907 Broken Link Third Party Advisory
http://www.vupen.com/english/advisories/2009/3184 Broken Link Third Party Advisory
http://www.vupen.com/english/advisories/2010/1107 Broken Link Third Party Advisory
https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E Mailing List Patch
https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E Mailing List Patch
https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E Mailing List Patch
https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E Mailing List Patch
https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E Mailing List Patch
https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E Mailing List Patch
https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E Mailing List Patch
https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E Mailing List Patch
https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E Mailing List Patch
https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E Mailing List Patch
https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E Mailing List Patch
https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E Mailing List Patch
https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E Mailing List Patch
https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E Mailing List Patch
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10270 Broken Link Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12473 Broken Link Third Party Advisory
https://www.exploit-db.com/exploits/8842 Exploit VDB Entry
https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01173.html Mailing List
https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01201.html Mailing List
https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01228.html Mailing List
http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html Mailing List Third Party Advisory
http://marc.info/?l=apr-dev&m=124396021826125&w=2 Mailing List Patch
http://marc.info/?l=bugtraq&m=129190899612998&w=2 Mailing List
http://marc.info/?l=bugtraq&m=129190899612998&w=2 Mailing List
http://secunia.com/advisories/34724 Broken Link Third Party Advisory
http://secunia.com/advisories/35284 Broken Link Third Party Advisory
http://secunia.com/advisories/35360 Broken Link Third Party Advisory
http://secunia.com/advisories/35395 Broken Link Third Party Advisory
http://secunia.com/advisories/35444 Broken Link Third Party Advisory
http://secunia.com/advisories/35487 Broken Link Third Party Advisory
http://secunia.com/advisories/35565 Broken Link Third Party Advisory
http://secunia.com/advisories/35710 Broken Link Third Party Advisory
http://secunia.com/advisories/35797 Broken Link Third Party Advisory
http://secunia.com/advisories/35843 Broken Link Third Party Advisory
http://secunia.com/advisories/36473 Broken Link Third Party Advisory
http://secunia.com/advisories/37221 Broken Link Third Party Advisory
http://security.gentoo.org/glsa/glsa-200907-03.xml Third Party Advisory
http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.538210 Broken Link Third Party Advisory
http://support.apple.com/kb/HT3937 Broken Link
http://svn.apache.org/viewvc?view=rev&revision=781403 Patch
http://wiki.rpath.com/Advisories:rPSA-2009-0123 Broken Link
http://www-01.ibm.com/support/docview.wss?uid=swg1PK88342 Broken Link
http://www-01.ibm.com/support/docview.wss?uid=swg1PK91241 Broken Link Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1PK99478 Broken Link Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg27014463 Broken Link Third Party Advisory
http://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.3 Broken Link
http://www.debian.org/security/2009/dsa-1812 Mailing List Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2009:131 Broken Link Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 Broken Link Third Party Advisory
http://www.openwall.com/lists/oss-security/2009/06/03/4 Mailing List
http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html Patch Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2009-1107.html Broken Link Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2009-1108.html Broken Link Third Party Advisory
http://www.securityfocus.com/archive/1/506053/100/0/threaded Broken Link Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/35253 Broken Link Third Party Advisory VDB Entry
http://www.ubuntu.com/usn/usn-786-1 Third Party Advisory
http://www.ubuntu.com/usn/usn-787-1 Third Party Advisory
http://www.vupen.com/english/advisories/2009/1907 Broken Link Third Party Advisory
http://www.vupen.com/english/advisories/2009/3184 Broken Link Third Party Advisory
http://www.vupen.com/english/advisories/2010/1107 Broken Link Third Party Advisory
https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E Mailing List Patch
https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E Mailing List Patch
https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E Mailing List Patch
https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E Mailing List Patch
https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E Mailing List Patch
https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E Mailing List Patch
https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E Mailing List Patch
https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E Mailing List Patch
https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E Mailing List Patch
https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E Mailing List Patch
https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E Mailing List Patch
https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E Mailing List Patch
https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E Mailing List Patch
https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E Mailing List Patch
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10270 Broken Link Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12473 Broken Link Third Party Advisory
https://www.exploit-db.com/exploits/8842 Exploit VDB Entry
https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01173.html Mailing List
https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01201.html Mailing List
https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01228.html Mailing List
Configurations

Configuration 1 (hide)

cpe:2.3:a:apache:apr-util:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

Configuration 3 (hide)

cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*

Configuration 4 (hide)

cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*

Configuration 5 (hide)

OR cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*

Configuration 6 (hide)

OR cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*

Configuration 7 (hide)

cpe:2.3:a:oracle:http_server:-:*:*:*:*:*:*:*

Configuration 8 (hide)

cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*
History

21 Nov 2024, 01:03

Type Values Removed Values Added
References () http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - Mailing List, Third Party Advisory () http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - Mailing List, Third Party Advisory
References () http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html - Mailing List, Third Party Advisory () http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html - Mailing List, Third Party Advisory
References () http://marc.info/?l=apr-dev&m=124396021826125&w=2 - Mailing List, Patch () http://marc.info/?l=apr-dev&m=124396021826125&w=2 - Mailing List, Patch
References () http://marc.info/?l=bugtraq&m=129190899612998&w=2 - Mailing List () http://marc.info/?l=bugtraq&m=129190899612998&w=2 - Mailing List
References () http://secunia.com/advisories/34724 - Broken Link, Third Party Advisory () http://secunia.com/advisories/34724 - Broken Link, Third Party Advisory
References () http://secunia.com/advisories/35284 - Broken Link, Third Party Advisory () http://secunia.com/advisories/35284 - Broken Link, Third Party Advisory
References () http://secunia.com/advisories/35360 - Broken Link, Third Party Advisory () http://secunia.com/advisories/35360 - Broken Link, Third Party Advisory
References () http://secunia.com/advisories/35395 - Broken Link, Third Party Advisory () http://secunia.com/advisories/35395 - Broken Link, Third Party Advisory
References () http://secunia.com/advisories/35444 - Broken Link, Third Party Advisory () http://secunia.com/advisories/35444 - Broken Link, Third Party Advisory
References () http://secunia.com/advisories/35487 - Broken Link, Third Party Advisory () http://secunia.com/advisories/35487 - Broken Link, Third Party Advisory
References () http://secunia.com/advisories/35565 - Broken Link, Third Party Advisory () http://secunia.com/advisories/35565 - Broken Link, Third Party Advisory
References () http://secunia.com/advisories/35710 - Broken Link, Third Party Advisory () http://secunia.com/advisories/35710 - Broken Link, Third Party Advisory
References () http://secunia.com/advisories/35797 - Broken Link, Third Party Advisory () http://secunia.com/advisories/35797 - Broken Link, Third Party Advisory
References () http://secunia.com/advisories/35843 - Broken Link, Third Party Advisory () http://secunia.com/advisories/35843 - Broken Link, Third Party Advisory
References () http://secunia.com/advisories/36473 - Broken Link, Third Party Advisory () http://secunia.com/advisories/36473 - Broken Link, Third Party Advisory
References () http://secunia.com/advisories/37221 - Broken Link, Third Party Advisory () http://secunia.com/advisories/37221 - Broken Link, Third Party Advisory
References () http://security.gentoo.org/glsa/glsa-200907-03.xml - Third Party Advisory () http://security.gentoo.org/glsa/glsa-200907-03.xml - Third Party Advisory
References () http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.538210 - Broken Link, Third Party Advisory () http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.538210 - Broken Link, Third Party Advisory
References () http://support.apple.com/kb/HT3937 - Broken Link () http://support.apple.com/kb/HT3937 - Broken Link
References () http://svn.apache.org/viewvc?view=rev&revision=781403 - Patch () http://svn.apache.org/viewvc?view=rev&revision=781403 - Patch
References () http://wiki.rpath.com/Advisories:rPSA-2009-0123 - Broken Link () http://wiki.rpath.com/Advisories:rPSA-2009-0123 - Broken Link
References () http://www-01.ibm.com/support/docview.wss?uid=swg1PK88342 - Broken Link () http://www-01.ibm.com/support/docview.wss?uid=swg1PK88342 - Broken Link
References () http://www-01.ibm.com/support/docview.wss?uid=swg1PK91241 - Broken Link, Third Party Advisory () http://www-01.ibm.com/support/docview.wss?uid=swg1PK91241 - Broken Link, Third Party Advisory
References () http://www-01.ibm.com/support/docview.wss?uid=swg1PK99478 - Broken Link, Third Party Advisory () http://www-01.ibm.com/support/docview.wss?uid=swg1PK99478 - Broken Link, Third Party Advisory
References () http://www-01.ibm.com/support/docview.wss?uid=swg27014463 - Broken Link, Third Party Advisory () http://www-01.ibm.com/support/docview.wss?uid=swg27014463 - Broken Link, Third Party Advisory
References () http://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.3 - Broken Link () http://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.3 - Broken Link
References () http://www.debian.org/security/2009/dsa-1812 - Mailing List, Third Party Advisory () http://www.debian.org/security/2009/dsa-1812 - Mailing List, Third Party Advisory
References () http://www.mandriva.com/security/advisories?name=MDVSA-2009:131 - Broken Link, Third Party Advisory () http://www.mandriva.com/security/advisories?name=MDVSA-2009:131 - Broken Link, Third Party Advisory
References () http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 - Broken Link, Third Party Advisory () http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 - Broken Link, Third Party Advisory
References () http://www.openwall.com/lists/oss-security/2009/06/03/4 - Mailing List () http://www.openwall.com/lists/oss-security/2009/06/03/4 - Mailing List
References () http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html - Patch, Third Party Advisory () http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html - Patch, Third Party Advisory
References () http://www.redhat.com/support/errata/RHSA-2009-1107.html - Broken Link, Third Party Advisory () http://www.redhat.com/support/errata/RHSA-2009-1107.html - Broken Link, Third Party Advisory
References () http://www.redhat.com/support/errata/RHSA-2009-1108.html - Broken Link, Third Party Advisory () http://www.redhat.com/support/errata/RHSA-2009-1108.html - Broken Link, Third Party Advisory
References () http://www.securityfocus.com/archive/1/506053/100/0/threaded - Broken Link, Third Party Advisory, VDB Entry () http://www.securityfocus.com/archive/1/506053/100/0/threaded - Broken Link, Third Party Advisory, VDB Entry
References () http://www.securityfocus.com/bid/35253 - Broken Link, Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/35253 - Broken Link, Third Party Advisory, VDB Entry
References () http://www.ubuntu.com/usn/usn-786-1 - Third Party Advisory () http://www.ubuntu.com/usn/usn-786-1 - Third Party Advisory
References () http://www.ubuntu.com/usn/usn-787-1 - Third Party Advisory () http://www.ubuntu.com/usn/usn-787-1 - Third Party Advisory
References () http://www.vupen.com/english/advisories/2009/1907 - Broken Link, Third Party Advisory () http://www.vupen.com/english/advisories/2009/1907 - Broken Link, Third Party Advisory
References () http://www.vupen.com/english/advisories/2009/3184 - Broken Link, Third Party Advisory () http://www.vupen.com/english/advisories/2009/3184 - Broken Link, Third Party Advisory
References () http://www.vupen.com/english/advisories/2010/1107 - Broken Link, Third Party Advisory () http://www.vupen.com/english/advisories/2010/1107 - Broken Link, Third Party Advisory
References () https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - Mailing List, Patch () https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - Mailing List, Patch
References () https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - Mailing List, Patch () https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - Mailing List, Patch
References () https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E - Mailing List, Patch () https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E - Mailing List, Patch
References () https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E - Mailing List, Patch () https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E - Mailing List, Patch
References () https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - Mailing List, Patch () https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - Mailing List, Patch
References () https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E - Mailing List, Patch () https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E - Mailing List, Patch
References () https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - Mailing List, Patch () https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - Mailing List, Patch
References () https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - Mailing List, Patch () https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - Mailing List, Patch
References () https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E - Mailing List, Patch () https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E - Mailing List, Patch
References () https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E - Mailing List, Patch () https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E - Mailing List, Patch
References () https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - Mailing List, Patch () https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - Mailing List, Patch
References () https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E - Mailing List, Patch () https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E - Mailing List, Patch
References () https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - Mailing List, Patch () https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - Mailing List, Patch
References () https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - Mailing List, Patch () https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - Mailing List, Patch
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10270 - Broken Link, Third Party Advisory () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10270 - Broken Link, Third Party Advisory
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12473 - Broken Link, Third Party Advisory () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12473 - Broken Link, Third Party Advisory
References () https://www.exploit-db.com/exploits/8842 - Exploit, VDB Entry () https://www.exploit-db.com/exploits/8842 - Exploit, VDB Entry
References () https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01173.html - Mailing List () https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01173.html - Mailing List
References () https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01201.html - Mailing List () https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01201.html - Mailing List
References () https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01228.html - Mailing List () https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01228.html - Mailing List

02 Feb 2024, 14:11

Type Values Removed Values Added
CWE NVD-CWE-noinfo CWE-776
References (SECUNIA) http://secunia.com/advisories/35565 - Third Party Advisory (SECUNIA) http://secunia.com/advisories/35565 - Broken Link, Third Party Advisory
References () https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E - () https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E - Mailing List, Patch
References (BID) http://www.securityfocus.com/bid/35253 - Third Party Advisory, VDB Entry (BID) http://www.securityfocus.com/bid/35253 - Broken Link, Third Party Advisory, VDB Entry
References () https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - () https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - Mailing List, Patch
References (HP) http://marc.info/?l=bugtraq&m=129190899612998&w=2 - Third Party Advisory (HP) http://marc.info/?l=bugtraq&m=129190899612998&w=2 - Mailing List
References () https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - () https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - Mailing List, Patch
References () https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E - () https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E - Mailing List, Patch
References () https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E - () https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E - Mailing List, Patch
References (SECUNIA) http://secunia.com/advisories/35487 - Third Party Advisory (SECUNIA) http://secunia.com/advisories/35487 - Broken Link, Third Party Advisory
References (SECUNIA) http://secunia.com/advisories/35843 - Third Party Advisory (SECUNIA) http://secunia.com/advisories/35843 - Broken Link, Third Party Advisory
References () https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - () https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - Mailing List, Patch
References (SECUNIA) http://secunia.com/advisories/35444 - Third Party Advisory (SECUNIA) http://secunia.com/advisories/35444 - Broken Link, Third Party Advisory
References () https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - () https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - Mailing List, Patch
References (DEBIAN) http://www.debian.org/security/2009/dsa-1812 - Third Party Advisory (DEBIAN) http://www.debian.org/security/2009/dsa-1812 - Mailing List, Third Party Advisory
References (SECUNIA) http://secunia.com/advisories/35797 - Third Party Advisory (SECUNIA) http://secunia.com/advisories/35797 - Broken Link, Third Party Advisory
References (EXPLOIT-DB) https://www.exploit-db.com/exploits/8842 - Exploit, Third Party Advisory, VDB Entry (EXPLOIT-DB) https://www.exploit-db.com/exploits/8842 - Exploit, VDB Entry
References (REDHAT) http://www.redhat.com/support/errata/RHSA-2009-1108.html - Third Party Advisory (REDHAT) http://www.redhat.com/support/errata/RHSA-2009-1108.html - Broken Link, Third Party Advisory
References (FEDORA) https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01201.html - Third Party Advisory (FEDORA) https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01201.html - Mailing List
References (CONFIRM) http://svn.apache.org/viewvc?view=rev&revision=781403 - Third Party Advisory (CONFIRM) http://svn.apache.org/viewvc?view=rev&revision=781403 - Patch
References (VUPEN) http://www.vupen.com/english/advisories/2009/1907 - Third Party Advisory (VUPEN) http://www.vupen.com/english/advisories/2009/1907 - Broken Link, Third Party Advisory
References (FEDORA) https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01228.html - Third Party Advisory (FEDORA) https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01228.html - Mailing List
References (OVAL) https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12473 - Third Party Advisory (OVAL) https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12473 - Broken Link, Third Party Advisory
References (SECUNIA) http://secunia.com/advisories/35395 - Third Party Advisory (SECUNIA) http://secunia.com/advisories/35395 - Broken Link, Third Party Advisory
References (VUPEN) http://www.vupen.com/english/advisories/2009/3184 - Third Party Advisory (VUPEN) http://www.vupen.com/english/advisories/2009/3184 - Broken Link, Third Party Advisory
References (MANDRIVA) http://www.mandriva.com/security/advisories?name=MDVSA-2009:131 - Third Party Advisory (MANDRIVA) http://www.mandriva.com/security/advisories?name=MDVSA-2009:131 - Broken Link, Third Party Advisory
References (CONFIRM) http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html - Third Party Advisory (CONFIRM) http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html - Patch, Third Party Advisory
References (CONFIRM) http://www-01.ibm.com/support/docview.wss?uid=swg27014463 - Third Party Advisory (CONFIRM) http://www-01.ibm.com/support/docview.wss?uid=swg27014463 - Broken Link, Third Party Advisory
References (VUPEN) http://www.vupen.com/english/advisories/2010/1107 - Third Party Advisory (VUPEN) http://www.vupen.com/english/advisories/2010/1107 - Broken Link, Third Party Advisory
References (AIXAPAR) http://www-01.ibm.com/support/docview.wss?uid=swg1PK91241 - Third Party Advisory (AIXAPAR) http://www-01.ibm.com/support/docview.wss?uid=swg1PK91241 - Broken Link, Third Party Advisory
References () https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - () https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - Mailing List, Patch
References () https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E - () https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E - Mailing List, Patch
References () https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E - () https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E - Mailing List, Patch
References () https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - () https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - Mailing List, Patch
References (SECUNIA) http://secunia.com/advisories/36473 - Third Party Advisory (SECUNIA) http://secunia.com/advisories/36473 - Broken Link, Third Party Advisory
References (REDHAT) http://www.redhat.com/support/errata/RHSA-2009-1107.html - Third Party Advisory (REDHAT) http://www.redhat.com/support/errata/RHSA-2009-1107.html - Broken Link, Third Party Advisory
References (SECUNIA) http://secunia.com/advisories/35710 - Third Party Advisory (SECUNIA) http://secunia.com/advisories/35710 - Broken Link, Third Party Advisory
References () https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - () https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - Mailing List, Patch
References (SECUNIA) http://secunia.com/advisories/35360 - Third Party Advisory (SECUNIA) http://secunia.com/advisories/35360 - Broken Link, Third Party Advisory
References (FEDORA) https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01173.html - Third Party Advisory (FEDORA) https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01173.html - Mailing List
References (MANDRIVA) http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 - Third Party Advisory (MANDRIVA) http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 - Broken Link, Third Party Advisory
References (BUGTRAQ) http://www.securityfocus.com/archive/1/506053/100/0/threaded - Third Party Advisory, VDB Entry (BUGTRAQ) http://www.securityfocus.com/archive/1/506053/100/0/threaded - Broken Link, Third Party Advisory, VDB Entry
References (OVAL) https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10270 - Third Party Advisory (OVAL) https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10270 - Broken Link, Third Party Advisory
References (SLACKWARE) http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.538210 - Third Party Advisory (SLACKWARE) http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.538210 - Broken Link, Third Party Advisory
References () https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - () https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - Mailing List, Patch
References (SECUNIA) http://secunia.com/advisories/34724 - Third Party Advisory (SECUNIA) http://secunia.com/advisories/34724 - Broken Link, Third Party Advisory
References (AIXAPAR) http://www-01.ibm.com/support/docview.wss?uid=swg1PK99478 - Third Party Advisory (AIXAPAR) http://www-01.ibm.com/support/docview.wss?uid=swg1PK99478 - Broken Link, Third Party Advisory
References (SECUNIA) http://secunia.com/advisories/35284 - Third Party Advisory (SECUNIA) http://secunia.com/advisories/35284 - Broken Link, Third Party Advisory
References (SECUNIA) http://secunia.com/advisories/37221 - Third Party Advisory (SECUNIA) http://secunia.com/advisories/37221 - Broken Link, Third Party Advisory
References () https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E - () https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E - Mailing List, Patch
CVSS v2 : 5.0
v3 : unknown 		v2 : 5.0
v3 : 7.5

07 Nov 2023, 02:04

Type Values Removed Values Added
References
  • {'url': 'https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9@%3Ccvs.httpd.apache.org%3E', 'name': '[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/', 'tags': ['Mailing List', 'Third Party Advisory'], 'refsource': 'MLIST'}
  • {'url': 'https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f@%3Ccvs.httpd.apache.org%3E', 'name': '[httpd-cvs] 20190815 svn commit: r1048743 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['Mailing List', 'Vendor Advisory'], 'refsource': 'MLIST'}
  • {'url': 'https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e@%3Ccvs.httpd.apache.org%3E', 'name': '[httpd-cvs] 20210330 svn commit: r1073139 [6/13] - in /websites/staging/httpd/trunk/content: ./ security/json/', 'tags': ['Mailing List', 'Third Party Advisory'], 'refsource': 'MLIST'}
  • {'url': 'https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f@%3Ccvs.httpd.apache.org%3E', 'name': '[httpd-cvs] 20210606 svn commit: r1075470 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['Mailing List', 'Third Party Advisory'], 'refsource': 'MLIST'}
  • {'url': 'https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8@%3Ccvs.httpd.apache.org%3E', 'name': '[httpd-cvs] 20210330 svn commit: r1073149 [6/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/', 'tags': ['Mailing List', 'Third Party Advisory'], 'refsource': 'MLIST'}
  • {'url': 'https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7@%3Ccvs.httpd.apache.org%3E', 'name': '[httpd-cvs] 20200401 svn commit: r1058586 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['Mailing List', 'Vendor Advisory'], 'refsource': 'MLIST'}
  • {'url': 'https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7@%3Ccvs.httpd.apache.org%3E', 'name': '[httpd-cvs] 20210330 svn commit: r1888194 [6/13] - /httpd/site/trunk/content/security/json/', 'tags': ['Mailing List', 'Third Party Advisory'], 'refsource': 'MLIST'}
  • {'url': 'https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b@%3Ccvs.httpd.apache.org%3E', 'name': '[httpd-cvs] 20200401 svn commit: r1058587 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['Mailing List', 'Vendor Advisory'], 'refsource': 'MLIST'}
  • {'url': 'https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24@%3Ccvs.httpd.apache.org%3E', 'name': '[httpd-cvs] 20210603 svn commit: r1075360 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['Mailing List', 'Third Party Advisory'], 'refsource': 'MLIST'}
  • {'url': 'https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53@%3Ccvs.httpd.apache.org%3E', 'name': '[httpd-cvs] 20190815 svn commit: r1048742 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['Mailing List', 'Vendor Advisory'], 'refsource': 'MLIST'}
  • {'url': 'https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064@%3Ccvs.httpd.apache.org%3E', 'name': '[httpd-cvs] 20210330 svn commit: r1073146 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities-httpd.xml security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['Mailing List', 'Third Party Advisory'], 'refsource': 'MLIST'}
  • {'url': 'https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a@%3Ccvs.httpd.apache.org%3E', 'name': '[httpd-cvs] 20210606 svn commit: r1075467 [2/2] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['Mailing List', 'Third Party Advisory'], 'refsource': 'MLIST'}
  • {'url': 'https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920@%3Ccvs.httpd.apache.org%3E', 'name': '[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/', 'tags': ['Mailing List', 'Third Party Advisory'], 'refsource': 'MLIST'}
  • {'url': 'https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b@%3Ccvs.httpd.apache.org%3E', 'name': '[httpd-cvs] 20210330 svn commit: r1073140 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['Mailing List', 'Third Party Advisory'], 'refsource': 'MLIST'}
  • () https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E -
  • () https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E -
  • () https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E -
  • () https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E -
  • () https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E -
  • () https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E -
  • () https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E -
  • () https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E -
  • () https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E -
  • () https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E -
  • () https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E -
  • () https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E -
  • () https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E -
  • () https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E -

31 Oct 2023, 16:53

Type Values Removed Values Added
References (MLIST) https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e@%3Ccvs.httpd.apache.org%3E - (MLIST) https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e@%3Ccvs.httpd.apache.org%3E - Mailing List, Third Party Advisory
References (MLIST) https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9@%3Ccvs.httpd.apache.org%3E - (MLIST) https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9@%3Ccvs.httpd.apache.org%3E - Mailing List, Third Party Advisory
References (MLIST) https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064@%3Ccvs.httpd.apache.org%3E - (MLIST) https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064@%3Ccvs.httpd.apache.org%3E - Mailing List, Third Party Advisory
References (MLIST) https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8@%3Ccvs.httpd.apache.org%3E - (MLIST) https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8@%3Ccvs.httpd.apache.org%3E - Mailing List, Third Party Advisory
References (MLIST) https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a@%3Ccvs.httpd.apache.org%3E - (MLIST) https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a@%3Ccvs.httpd.apache.org%3E - Mailing List, Third Party Advisory
References (MLIST) https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7@%3Ccvs.httpd.apache.org%3E - (MLIST) https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7@%3Ccvs.httpd.apache.org%3E - Mailing List, Third Party Advisory
References (MLIST) https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b@%3Ccvs.httpd.apache.org%3E - (MLIST) https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b@%3Ccvs.httpd.apache.org%3E - Mailing List, Third Party Advisory
References (MLIST) https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f@%3Ccvs.httpd.apache.org%3E - (MLIST) https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f@%3Ccvs.httpd.apache.org%3E - Mailing List, Third Party Advisory
References (MLIST) https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920@%3Ccvs.httpd.apache.org%3E - (MLIST) https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920@%3Ccvs.httpd.apache.org%3E - Mailing List, Third Party Advisory
References (MLIST) https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24@%3Ccvs.httpd.apache.org%3E - (MLIST) https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24@%3Ccvs.httpd.apache.org%3E - Mailing List, Third Party Advisory
First Time Apache http Server
CPE cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*
Information

Published : 2009-06-08 01:00

Updated : 2024-11-21 01:03

NVD link : CVE-2009-1955

Mitre link : CVE-2009-1955

CVE.ORG link : CVE-2009-1955

JSON object : View

Products Affected

debian

  • debian_linux

suse

  • linux_enterprise_server

apple

  • mac_os_x

canonical

  • ubuntu_linux

apache

  • http_server
  • apr-util

oracle

  • http_server

fedoraproject

  • fedora
CWE
CWE-776

Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')


NetmanageIT Website NetmanageIT OSINT Web NetmanageIT OpenCTI NetmanageIT PDF Tools NetmanageIT CTO Corner Blog NetmanageIT Email Header Analyzer NetmanageIT Password Pusher NetmanageIT Internet Health and Latency Dashboard NetmanageIT Dedicated Speed Test Site NetmanageIT Ubuntu Mirror 10Gbps Copyright OpenCVE 2024