National Vulnerability Database (CVE-2006-3747)

National Cyber-Alert System Vulnerability Summary: CVE-2006-3747
Orirignal release date: 2006-07-28 Source: US-CERT/NIST ### Overview Off-by-one error in the ldap scheme handling in the Rewrite module (mod_rewrite) in Apache 1.3 from 1.3.28, 2.0.46 and other versions before 2.0.59, and 2.2, when RewriteEngine is enabled, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted URLs that are not properly handled using certain rewrite rules. ### Impact CVSS Severity: 7.0 (High) Range: remote Authentication: exception Impact Type: avail,conf,int,sec_prot user="1" ### Reference to Advisories, Solutions, and Tools External Source: NSO Name: http://www.apache.org/dist/httpd/Announcement2.0.html Hyperlink: http://www.apache.org/dist/httpd/Announcement2.0.html External Source: NSO Name: revision=426144 Hyperlink: http://svn.apache.org/viewvc?view=rev& External Source: CERT-VN Name: VU#395412 Hyperlink: http://www.kb.cert.org/vuls/id/395412 External Source: UBUNTU Name: USN-328-1 Hyperlink: http://www.ubuntu.com/usn/usn-328-1 External Source: BUGTRAQ Name: 20060728 Apache mod_rewrite Buffer Overflow Vulnerability Hyperlink: http://www.securityfocus.com/archive/1/archive/1/441487/100/0/threaded External Source: BUGTRAQ Name: 20060728 [Announcement] Apache HTTP Server 2.2.3 (2.0.59 Hyperlink: http://www.securityfocus.com/archive/1/archive/1/441485/100/0/threaded External Source: 1.3.37) Released Name: Hyperlink: External Source: FULLDISC Name: 20060728 Apache 1.3.29/2.X mod_rewrite Buffer Overflow Vulnerability CVE-2006-3747 Hyperlink: http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/048267.html External Source: FULLDISC Name: 20060728 [Announcement] Apache HTTP Server 2.2.3 (2.0.59 Hyperlink: http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/048271.html External Source: 1.3.37) Released Name: Hyperlink: External Source: MANDRIVA Name: MDKSA-2006:133 Hyperlink: http://frontal2.mandriva.com/security/advisories?name=MDKSA-2006:133 External Source: OPENPKG Name: OpenPKG-SA-2006.015 Hyperlink: http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.015-apache.html External Source: SUSE Name: SUSE-SA:2006:043 Hyperlink: http://www.novell.com/linux/security/advisories/2006_43_apache.html External Source: BID Name: 19204 Hyperlink: http://www.securityfocus.com/bid/19204 External Source: FRSIRT Name: ADV-2006-3017 Hyperlink: http://www.frsirt.com/english/advisories/2006/3017 External Source: SECTRACK Name: 1016601 Hyperlink: http://securitytracker.com/id?1016601 External Source: SECUNIA Name: 21197 Hyperlink: http://secunia.com/advisories/21197 External Source: SECUNIA Name: 21241 Hyperlink: http://secunia.com/advisories/21241 External Source: XF Name: apache-modrewrite-offbyone-bo(28063) Hyperlink: http://xforce.iss.net/xforce/xfdb/28063 External Source: NSO Name: http://kbase.redhat.com/faq/FAQ_68_8653.shtm Hyperlink: http://kbase.redhat.com/faq/FAQ_68_8653.shtm External Source: DEBIAN Name: DSA-1131 Hyperlink: http://www.debian.org/security/2006/dsa-1131 External Source: DEBIAN Name: DSA-1132 Hyperlink: http://www.debian.org/security/2006/dsa-1132 External Source: GENTOO Name: GLSA-200608-01 Hyperlink: http://security.gentoo.org/glsa/glsa-200608-01.xml External Source: SECUNIA Name: 21245 Hyperlink: http://secunia.com/advisories/21245 External Source: SECUNIA Name: 21266 Hyperlink: http://secunia.com/advisories/21266 External Source: SECUNIA Name: 21273 Hyperlink: http://secunia.com/advisories/21273 External Source: SECUNIA Name: 21284 Hyperlink: http://secunia.com/advisories/21284 External Source: SECUNIA Name: 21313 Hyperlink: http://secunia.com/advisories/21313 External Source: BUGTRAQ Name: 20060728 rPSA-2006-0139-1 httpd mod_ssl Hyperlink: http://www.securityfocus.com/archive/1/archive/1/441526/100/200/threaded External Source: NSO Name: https://issues.rpath.com/browse/RPL-538 Hyperlink: https://issues.rpath.com/browse/RPL-538 External Source: AIXAPAR Name: PK27875 Hyperlink: http://www-1.ibm.com/support/docview.wss?uid=swg24013080 External Source: AIXAPAR Name: PK29154 Hyperlink: http://www-1.ibm.com/support/docview.wss?uid=swg1PK29154 External Source: AIXAPAR Name: PK29156 Hyperlink: http://www-1.ibm.com/support/docview.wss?uid=swg1PK29156 External Source: FRSIRT Name: ADV-2006-3264 Hyperlink: http://www.frsirt.com/english/advisories/2006/3264 External Source: FRSIRT Name: ADV-2006-3282 Hyperlink: http://www.frsirt.com/english/advisories/2006/3282 External Source: OSVDB Name: 27588 Hyperlink: http://www.osvdb.org/27588 External Source: SECUNIA Name: 21307 Hyperlink: http://secunia.com/advisories/21307 External Source: SECUNIA Name: 21315 Hyperlink: http://secunia.com/advisories/21315 External Source: SECUNIA Name: 21247 Hyperlink: http://secunia.com/advisories/21247 External Source: SECUNIA Name: 21478 Hyperlink: http://secunia.com/advisories/21478 External Source: SECUNIA Name: 21509 Hyperlink: http://secunia.com/advisories/21509 External Source: BUGTRAQ Name: 20060820 POC & Hyperlink: http://www.securityfocus.com/archive/1/archive/1/443870/100/0/threaded External Source: HP Name: HPSBUX02145 Hyperlink: http://www.securityfocus.com/archive/1/archive/1/445206/100/0/threaded External Source: FRSIRT Name: ADV-2006-3884 Hyperlink: http://www.frsirt.com/english/advisories/2006/3884 External Source: SECUNIA Name: 22262 Hyperlink: http://secunia.com/advisories/22262 External Source: SUNALERT Name: 102662 Hyperlink: http://sunsolve.sun.com/search/document.do?assetkey=1-26-102662-1 External Source: SUNALERT Name: 102663 Hyperlink: http://sunsolve.sun.com/search/document.do?assetkey=1-26-102663-1 External Source: FRSIRT Name: ADV-2006-3995 Hyperlink: http://www.frsirt.com/english/advisories/2006/3995 External Source: FRSIRT Name: ADV-2006-4015 Hyperlink: http://www.frsirt.com/english/advisories/2006/4015 External Source: SECUNIA Name: 22368 Hyperlink: http://secunia.com/advisories/22368 External Source: SECUNIA Name: 22388 Hyperlink: http://secunia.com/advisories/22388 External Source: NSO Name: ID=3117 Hyperlink: http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18& External Source: FRSIRT Name: ADV-2006-4207 Hyperlink: http://www.frsirt.com/english/advisories/2006/4207 External Source: SECUNIA Name: 22523 Hyperlink: http://secunia.com/advisories/22523 External Source: HP Name: HPSBUX02164 Hyperlink: http://www.securityfocus.com/archive/1/archive/1/450321/100/0/threaded External Source: FRSIRT Name: ADV-2006-4300 Hyperlink: http://www.frsirt.com/english/advisories/2006/4300 External Source: NSO Name: http://www-1.ibm.com/support/docview.wss?uid=swg27007951 Hyperlink: http://www-1.ibm.com/support/docview.wss?uid=swg27007951 External Source: SECUNIA Name: 23028 Hyperlink: http://secunia.com/advisories/23028 External Source: FRSIRT Name: ADV-2006-4868 Hyperlink: http://www.frsirt.com/english/advisories/2006/4868 External Source: SECUNIA Name: 23260 Hyperlink: http://secunia.com/advisories/23260 ### Vulnerable Software and Vendor Ubuntu Linux (Ubuntu) Apache (Apache Software Foundation) Technical Details CVE Standard Vulnerability Entry: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3747