Skip to content
OpenAdvisories
Unscored DSA-1167-1 2 CVEs

apache - missing input sanitising

Published Sep 4, 2006 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 3.1 apache 1.3.33-6sarge3

Vulnerabilities 2

  • Unscored —
    CVE-2005-3352 EPSS 74%

    Cross-site scripting (XSS) vulnerability in the mod_imap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.…

  • Unscored —
    CVE-2006-3918 Public exploit EPSS 95%

    http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 befor…