First published: Fri Feb 07 2003(Updated: )
Apache before 2.0.44, when running on unpatched Windows 9x and Me operating systems, allows remote attackers to cause a denial of service or execute arbitrary code via an HTTP request containing MS-DOS device names.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Apache Http Server | =2.0.36 | |
Apache Http Server | =2.0.37 | |
Apache Http Server | =2.0.38 | |
Apache Http Server | =2.0.39 | |
Apache Http Server | =2.0.40 | |
Apache Http Server | =2.0.41 | |
Apache Http Server | =2.0.42 | |
Apache Http Server | =2.0.43 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2003-0016 has the potential for high severity as it can cause denial of service and allows execution of arbitrary code.
To fix CVE-2003-0016, update Apache HTTP Server to version 2.0.44 or later.
Apache HTTP Server versions 2.0.36 through 2.0.43 are affected by CVE-2003-0016.
CVE-2003-0016 specifically affects Apache running on unpatched Windows 9x and Me operating systems.
CVE-2003-0016 enables remote attackers to craft HTTP requests that can result in a denial of service or arbitrary code execution.