Apache HTTP Server Numeric Errors Vulnerability - CVE-2006-3747 - Vulnerability Database

Apache HTTP Server Numeric Errors Vulnerability - CVE-2006-3747

High
Reference: CVE-2006-3747
Title: Apache HTTP Server Numeric Errors Vulnerability
Overview:

Off-by-one error in the ldap scheme handling in the Rewrite module (mod_rewrite) in Apache 1.3 from 1.3.28 2.0.46 and other versions before 2.0.59 and 2.2 when RewriteEngine is enabled allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted URLs that are not properly handled using certain rewrite rules.