APACHE 1.3.27 DOWNLOAD

Versions of Apache prior to 1. This version of Apache is principally a security and bug fix release. Note that this vulnerability is not in Apache itself, but rather one of the support programs bundled with Apache. Examine another version -- 2. A summary of the bug fixes is given at the end of this document. Users on non-Unix platforms are strongly encouraged to move up to Apache 2.

Uploader:	Gobar
Date Added:	3 May 2009
File Size:	5.74 Mb
Operating Systems:	Windows NT/2000/XP/2003/2003/7/8/10 MacOS 10/X
Downloads:	60926
Price:	Free* [*Free Regsitration Required]

You can also see an alternative view of this data which lists which vulnerabilities were fixed in each version.

Apache does not filter terminal escape sequences from error logs, which could make it easier for attackers to insert those sequences into terminal emulators containing vulnerabilities related to escape sequences. Apache Week rates the severity of each issue based on the overall impact to users. Apache is the most popular web server in the known universe; over half of the servers on the 1.3.27 are running Apache or one of its variants. Please email us at editors apacheweek.

This version of Apache is principally a security and bug fix release. This page gives a list of all the vulnerabilities that are known to affect version apachf.

Welcome! - The Apache HTTP Server Project

Security, stability, or performance issues on these non-Unix ports do not generally apply to the Unix version, due to software's Unix origin. While development continues to make this installation method more robust, questions should be 1.3.27 to the news: New features that relate to specific platforms: This makes it runtime configurable.

This Announcement notes the significant changes in 1. We consider Apache 1. Note however that some vendor versions aapche Apache may already contain backported security patches for some of these issues, so if you're using a vendor-supplied version of Apache contact your vendor for details.

New features The main new features in 1.

httpd-announce mailing list archives

You can also see an alternative apachhe of this data which lists which vulnerabilities were fixed in each version Apache Week rates the severity of each issue based on the overall impact to users Examine another version -- 2. Mark J Cox Comments or criticisms? This feature brought to you by: For an overview of new features introduced after 1.

We thank Matthew Murphy for notification of spache issue. We thank David Wagner for the responsible notification and disclosure of this issue.

Binary distributions are available from http: To exploit this an attacker would need to be able to create a carefully crafted configuration file. Error log escape filtering CVE Apache does not filter terminal escape sequences from error logs, which could make it 13.27 for attackers to insert those sequences into terminal emulators containing vulnerabilities related to escape sequences.

A summary of the bug fixes is given at the end of this document. Please note that the binary distributions are only provided for your convenience and current distributions for specific platforms are not always available. Note that this vulnerability is not in Apache itself, but rather one of the support programs bundled with Apache. This issue may lead to remote arbitrary code execution on some BSD platforms.

A starvation issue on listening sockets occurs when a short-lived connection on a rarely-accessed listening socket will cause a child to hold the accept mutex and block out new connections until another connection arrives on that rarely-accessed listening socket.

Security issues affecting Apache httpd 1.3.27

We thank iDefense for their responsible notification and disclosure of this issue. In order to exploit this issue an attacker would need to get an Apache apzche that was configured as a proxy to connect to a malicious site.

No further releases will be made in the 1. Versions of Apache prior to 1. A vulnerability exists in all versions of Apache prior to 1. Aoache would cause the Apache child processing the request to crash, although this does not represent a significant Denial of Service attack as requests will continue to be handled by other Apache child processes. Of particular note is that 1.