Apache Http Server vulnerabilities

CVE-1999-1053 [HIGH] CVE-1999-1053: guestbook.pl cleanses user-inserted SSI commands by removing text between "<!--" and "-->" separator guestbook.pl cleanses user-inserted SSI commands by removing text between "" separators, which allows remote attackers to execute arbitrary commands when guestbook.pl is run on Apache 1.3.9 and possibly other versions, since Apache allows other closing sequences besides "-->".

CVE-1999-0926 [CRITICAL] CVE-1999-0926: Apache allows remote attackers to conduct a denial of service via a large number of MIME headers. Apache allows remote attackers to conduct a denial of service via a large number of MIME headers.

CVE-2000-1206 [MEDIUM] CVE-2000-1206: Vulnerability in Apache httpd before 1.3.11, when configured for mass virtual hosting using mod_rewr Vulnerability in Apache httpd before 1.3.11, when configured for mass virtual hosting using mod_rewrite, or mod_vhost_alias in Apache 1.3.9, allows remote attackers to retrieve arbitrary files.

CVE-1999-1199 [CRITICAL] CVE-1999-1199: Apache WWW server 1.3.1 and earlier allows remote attackers to cause a denial of service (resource e Apache WWW server 1.3.1 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via a large number of MIME headers with the same name, aka the "sioux" vulnerability.

CVE-1999-0107 [MEDIUM] CVE-1999-0107: Buffer overflow in Apache 1.2.5 and earlier allows a remote attacker to cause a denial of service wi Buffer overflow in Apache 1.2.5 and earlier allows a remote attacker to cause a denial of service with a large number of GET requests containing a large number of / characters.

CVE-1999-0071 [HIGH] CVE-1999-0071: Apache httpd cookie buffer overflow for versions 1.1.1 and earlier. Apache httpd cookie buffer overflow for versions 1.1.1 and earlier.

CVE-1999-0236 [HIGH] CVE-1999-0236: ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs. ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs.

CVE-1999-0045 [HIGH] CVE-1999-0045: List of arbitrary files on Web host via nph-test-cgi script. List of arbitrary files on Web host via nph-test-cgi script.

CVE-1999-0070 [MEDIUM] CVE-1999-0070: test-cgi program allows an attacker to list files on the server. test-cgi program allows an attacker to list files on the server.

CVE-1999-0067 [CRITICAL] CWE-78 CVE-1999-0067: phf CGI program allows remote command execution through shell metacharacters. phf CGI program allows remote command execution through shell metacharacters.