NetSight
IP …
high7.6Public exploit code

CVE-2006-3747

Off-by-one error in the ldap scheme handling in the Rewrite module (mod_rewrite) in Apache 1.3 from 1.3.28, 2.0.46 and other versions before 2.0.59, and 2.2, w…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Off-by-one error in the ldap scheme handling in the Rewrite module (mod_rewrite) in Apache 1.3 from 1.3.28, 2.0.46 and other versions before 2.0.59, and 2.2, when RewriteEngine is enabled, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted URLs that are not properly handled using certain rewrite rules.

Affected products

VendorProductAffected versions
ApacheHttp Server
from 1.3.28 before 1.3.37
from 2.0.46 before 2.0.59
from 2.2.0 before 2.2.3
CanonicalUbuntu Linux
Versions 5.04, 5.10, 6.06
DebianDebian Linux
Version 3.1

Weakness classification

CWE-189

References