First published: Tue Dec 30 1997(Updated: )
Buffer overflow in Apache 1.2.5 and earlier allows a remote attacker to cause a denial of service with a large number of GET requests containing a large number of / characters.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Apache Http Server | =0.8.11 | |
Apache Http Server | =0.8.14 | |
Apache Http Server | =1.0 | |
Apache Http Server | =1.0.2 | |
Apache Http Server | =1.0.3 | |
Apache Http Server | =1.0.5 | |
Apache Http Server | =1.1 | |
Apache Http Server | =1.1.1 | |
Apache Http Server | =1.2.5 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-1999-0107 has a high severity due to its ability to cause a denial of service.
To fix CVE-1999-0107, upgrade to Apache version 1.3.0 or later, which is not affected.
Apache versions 0.8.11, 0.8.14, 1.0, 1.0.2, 1.0.3, 1.0.5, 1.1, 1.1.1, and 1.2.5 are affected by CVE-1999-0107.
Yes, CVE-1999-0107 can be exploited remotely through a large number of GET requests.
CVE-1999-0107 enables denial of service attacks against vulnerable Apache servers.