Apache Http Server vulnerabilities

CVE-2004-1387 [LOW] CVE-2004-1387: The check_forensic script in apache-utils package 1.3.31 allows local users to overwrite or create a The check_forensic script in apache-utils package 1.3.31 allows local users to overwrite or create arbitrary files via a symlink attack on temporary files.

CVE-2002-1233 [LOW] CVE-2002-1233: A regression error in the Debian distributions of the apache-ssl package (before 1.3.9 on Debian 2.2 A regression error in the Debian distributions of the apache-ssl package (before 1.3.9 on Debian 2.2, and before 1.3.26 on Debian 3.0), for Apache 1.3.27 and earlier, allows local users to read or modify the Apache password file via a symlink attack on temporary files when the administrator runs (1) htpasswd or (2) htdigest, a re-introduction of a vulnerability

CVE-2001-1534 [LOW] CWE-384 CVE-2001-1534: mod_usertrack in Apache 1.3.11 through 1.3.20 generates session ID's using predictable information i mod_usertrack in Apache 1.3.11 through 1.3.20 generates session ID's using predictable information including host IP address, system time and server process ID, which allows local users to obtain session ID's and bypass authentication when these session ID's are used for authentication.