{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Low"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated Apache packages that fix a minor security issue are now available\nfor Red Hat Linux 7.1, 7.2, and 7.3.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The Apache HTTP server is a powerful, full-featured, efficient, and\nfreely-available Web server.\n\nAn issue in the handling of regular expressions from configuration files\nwas discovered in releases of the Apache HTTP Server version 1.3 prior to\n1.3.29. To exploit this issue an attacker would need to have the ability\nto write to Apache configuration files such as .htaccess or httpd.conf. A\ncarefully-crafted configuration file can cause an exploitable buffer\noverflow and would allow the attacker to execute arbitrary code in the\ncontext of the server (in default configurations as the \u0027apache\u0027 user).\nThe Common Vulnerabilities and Exposures project (cve.mitre.org) has\nassigned the name CAN-2003-0542 to this issue.\n\nAll users of the Apache HTTP Web Server are advised to upgrade to the\napplicable errata packages, which contain back-ported fixes correcting\nthis issue.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2003:405",
        "url": "https://access.redhat.com/errata/RHSA-2003:405"
      },
      {
        "category": "external",
        "summary": "http://www.apacheweek.com/features/security-13.html",
        "url": "http://www.apacheweek.com/features/security-13.html"
      },
      {
        "category": "external",
        "summary": "108639",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=108639"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2003/rhsa-2003_405.json"
      }
    ],
    "title": "Red Hat Security Advisory: : Updated apache packages fix minor security vulnerability",
    "tracking": {
      "current_release_date": "2024-11-14T10:02:59+00:00",
      "generator": {
        "date": "2024-11-14T10:02:59+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.0"
        }
      },
      "id": "RHSA-2003:405",
      "initial_release_date": "2003-12-18T09:27:00+00:00",
      "revision_history": [
        {
          "date": "2003-12-18T09:27:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2003-12-18T00:00:00+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-14T10:02:59+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Linux 7.1",
                "product": {
                  "name": "Red Hat Linux 7.1",
                  "product_id": "Red Hat Linux 7.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:linux:7.1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Linux 7.2",
                "product": {
                  "name": "Red Hat Linux 7.2",
                  "product_id": "Red Hat Linux 7.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:linux:7.2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Linux 7.3",
                "product": {
                  "name": "Red Hat Linux 7.3",
                  "product_id": "Red Hat Linux 7.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:linux:7.3"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Linux"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2003-0542",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1617048"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple stack-based buffer overflows in (1) mod_alias and (2) mod_rewrite for Apache before 1.3.29 allow attackers to create configuration files to cause a denial of service (crash) or execute arbitrary code via a regular expression with more than 9 captures.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Linux 7.1",
          "Red Hat Linux 7.2",
          "Red Hat Linux 7.3"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2003-0542"
        },
        {
          "category": "external",
          "summary": "RHBZ#1617048",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617048"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2003-0542",
          "url": "https://www.cve.org/CVERecord?id=CVE-2003-0542"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2003-0542",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2003-0542"
        }
      ],
      "release_date": "2003-10-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2003-12-18T09:27:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo update all RPMs for your particular architecture, run:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade.  Only those\nRPMs which are currently installed will be updated.  Those RPMs which are\nnot installed but included in the list will not be updated.  Note that you\ncan also use wildcards (*.rpm) if your current directory *only* contains the\ndesired RPMs.\n\nPlease note that this update is also available via Red Hat Network.  Many\npeople find this an easier way to apply updates.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.\n\nIf up2date fails to connect to Red Hat Network due to SSL Certificate \nErrors, you need to install a version of the up2date client with an updated \ncertificate.  The latest version of up2date is available from the Red Hat \nFTP site and may also be downloaded directly from the RHN website:\n\nhttps://rhn.redhat.com/help/latest-up2date.pxt",
          "product_ids": [
            "Red Hat Linux 7.1",
            "Red Hat Linux 7.2",
            "Red Hat Linux 7.3"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2003:405"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "security flaw"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated versions of Stronghold 4 cross-platform are available that fix\nsecurity issues affecting OpenSSL and the Apache HTTP Server. A number\nof bug fixes are also included.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Stronghold 4 contains a number of open source technologies, including\nOpenSSL 0.9.6 and the Apache HTTP Server.\n\nTesting performed by the OpenSSL group using the Codenomicon TLS Test Tool\nuncovered a bug in older versions of OpenSSL 0.9.6 prior to 0.9.6d that can\nlead to a denial of service attack (infinite loop). The Common\nVulnerabilities and Exposures project (cve.mitre.org) has assigned the name\nCAN-2004-0081 to this issue.\n\nTesting performed by the OpenSSL group using the Codenomicon TLS Test Tool\nuncovered a null-pointer assignment in the do_change_cipher_spec() function\nin OpenSSL 0.9.6c-0.9.6k and 0.9.7a-0.9.7c. A remote attacker could\nsend a carefully crafted SSL/TLS handshake which could lead to a denial of\nservice attack.  The Common Vulnerabilities and Exposures project\n(cve.mitre.org) has assigned the name CAN-2004-0079 to this issue.\n\nTesting performed by Novell using a test suite provided by NISCC uncovered\nan issue in the ASN.1 parser in versions of OpenSSL 0.9.6 prior to 0.9.6l\nwhich could cause large recursion and possibly lead to a denial of service\nattack if used where stack space is limited. The Common Vulnerabilities\nand Exposures project (cve.mitre.org) has assigned the name CAN-2003-0851\nto this issue.\n\nAn issue in the handling of regular expressions from configuration files\nwas discovered in releases of the Apache HTTP Server version 1.3 prior to\n1.3.29. To exploit this issue an attacker would need to have the ability\nto write to Apache configuration files such as .htaccess or httpd.conf. A\ncarefully-crafted configuration file can cause an exploitable buffer\noverflow and would allow the attacker to execute arbitrary code in the\ncontext of the server. The Common Vulnerabilities and Exposures project\n(cve.mitre.org) has assigned the name CAN-2003-0542 to this issue.\n\nUsers of Stronghold 4 cross-platform are advised to update to these errata\nversions, which contain backported security fixes and are not vulnerable to\nthese issues.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2004:139",
        "url": "https://access.redhat.com/errata/RHSA-2004:139"
      },
      {
        "category": "external",
        "summary": "http://www.niscc.gov.uk/",
        "url": "http://www.niscc.gov.uk/"
      },
      {
        "category": "external",
        "summary": "http://www.codenomicon.com/testtools/tls/",
        "url": "http://www.codenomicon.com/testtools/tls/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_139.json"
      }
    ],
    "title": "Red Hat Security Advisory: apache, openssl security update for Stronghold",
    "tracking": {
      "current_release_date": "2024-11-21T23:00:35+00:00",
      "generator": {
        "date": "2024-11-21T23:00:35+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2004:139",
      "initial_release_date": "2004-03-17T17:20:00+00:00",
      "revision_history": [
        {
          "date": "2004-03-17T17:20:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2004-03-17T00:00:00+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-21T23:00:35+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Stronghold 4",
                "product": {
                  "name": "Red Hat Stronghold 4",
                  "product_id": "Red Hat Stronghold 4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:stronghold:4"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Stronghold Cross Platform"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2003-0542",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1617048"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple stack-based buffer overflows in (1) mod_alias and (2) mod_rewrite for Apache before 1.3.29 allow attackers to create configuration files to cause a denial of service (crash) or execute arbitrary code via a regular expression with more than 9 captures.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Stronghold 4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2003-0542"
        },
        {
          "category": "external",
          "summary": "RHBZ#1617048",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617048"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2003-0542",
          "url": "https://www.cve.org/CVERecord?id=CVE-2003-0542"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2003-0542",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2003-0542"
        }
      ],
      "release_date": "2003-10-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2004-03-17T17:20:00+00:00",
          "details": "Updated Stronghold 4 packages are now available via the update agent\nservice. Run the following command from the Stronghold 4 install root to\nupgrade an existing Stronghold 4 installation to the new package versions:\n\n$ bin/agent\n\nThe Stronghold 4.0h patch release which contains these updated packages is\nalso available from the download site.\n\nAfter upgrading Stronghold, the server must be completely restarted by\nrunning the following commands from the install root:\n\n$ bin/stop-server\n$ bin/start-server\n\nFor more information on how to upgrade between releases of Stronghold 4,\nrefer to http://stronghold.redhat.com/support/upgrade-sh4",
          "product_ids": [
            "Red Hat Stronghold 4"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2004:139"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "security flaw"
    },
    {
      "cve": "CVE-2003-0851",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1617090"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "OpenSSL 0.9.6k allows remote attackers to cause a denial of service (crash via large recursion) via malformed ASN.1 sequences.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Stronghold 4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2003-0851"
        },
        {
          "category": "external",
          "summary": "RHBZ#1617090",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617090"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2003-0851",
          "url": "https://www.cve.org/CVERecord?id=CVE-2003-0851"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2003-0851",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2003-0851"
        }
      ],
      "release_date": "2003-11-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2004-03-17T17:20:00+00:00",
          "details": "Updated Stronghold 4 packages are now available via the update agent\nservice. Run the following command from the Stronghold 4 install root to\nupgrade an existing Stronghold 4 installation to the new package versions:\n\n$ bin/agent\n\nThe Stronghold 4.0h patch release which contains these updated packages is\nalso available from the download site.\n\nAfter upgrading Stronghold, the server must be completely restarted by\nrunning the following commands from the install root:\n\n$ bin/stop-server\n$ bin/start-server\n\nFor more information on how to upgrade between releases of Stronghold 4,\nrefer to http://stronghold.redhat.com/support/upgrade-sh4",
          "product_ids": [
            "Red Hat Stronghold 4"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2004:139"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "security flaw"
    },
    {
      "cve": "CVE-2004-0079",
      "discovery_date": "2004-03-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1617140"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Stronghold 4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2004-0079"
        },
        {
          "category": "external",
          "summary": "RHBZ#1617140",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617140"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2004-0079",
          "url": "https://www.cve.org/CVERecord?id=CVE-2004-0079"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2004-0079",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2004-0079"
        }
      ],
      "release_date": "2004-03-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2004-03-17T17:20:00+00:00",
          "details": "Updated Stronghold 4 packages are now available via the update agent\nservice. Run the following command from the Stronghold 4 install root to\nupgrade an existing Stronghold 4 installation to the new package versions:\n\n$ bin/agent\n\nThe Stronghold 4.0h patch release which contains these updated packages is\nalso available from the download site.\n\nAfter upgrading Stronghold, the server must be completely restarted by\nrunning the following commands from the install root:\n\n$ bin/stop-server\n$ bin/start-server\n\nFor more information on how to upgrade between releases of Stronghold 4,\nrefer to http://stronghold.redhat.com/support/upgrade-sh4",
          "product_ids": [
            "Red Hat Stronghold 4"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2004:139"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "security flaw"
    },
    {
      "cve": "CVE-2004-0081",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1617142"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Stronghold 4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2004-0081"
        },
        {
          "category": "external",
          "summary": "RHBZ#1617142",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617142"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2004-0081",
          "url": "https://www.cve.org/CVERecord?id=CVE-2004-0081"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2004-0081",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2004-0081"
        }
      ],
      "release_date": "2004-03-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2004-03-17T17:20:00+00:00",
          "details": "Updated Stronghold 4 packages are now available via the update agent\nservice. Run the following command from the Stronghold 4 install root to\nupgrade an existing Stronghold 4 installation to the new package versions:\n\n$ bin/agent\n\nThe Stronghold 4.0h patch release which contains these updated packages is\nalso available from the download site.\n\nAfter upgrading Stronghold, the server must be completely restarted by\nrunning the following commands from the install root:\n\n$ bin/stop-server\n$ bin/start-server\n\nFor more information on how to upgrade between releases of Stronghold 4,\nrefer to http://stronghold.redhat.com/support/upgrade-sh4",
          "product_ids": [
            "Red Hat Stronghold 4"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2004:139"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "security flaw"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Low"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated httpd packages that fix two minor security issues in the Apache Web\nserver are now available for Red Hat Enterprise Linux 3.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The Apache HTTP Server is a powerful, full-featured, efficient, and\nfreely-available Web server.\n\nAn issue in the handling of regular expressions from configuration files\nwas discovered in releases of the Apache HTTP Server version 2.0 prior to\n2.0.48. To exploit this issue an attacker would need to have the ability\nto write to Apache configuration files such as .htaccess or httpd.conf. A\ncarefully-crafted configuration file can cause an exploitable buffer\noverflow and would allow the attacker to execute arbitrary code in the\ncontext of the server (in default configurations as the \u0027apache\u0027 user).\nThe Common Vulnerabilities and Exposures project (cve.mitre.org) has\nassigned the name CAN-2003-0542 to this issue.\n\nUsers of the Apache HTTP Server should upgrade to these erratum packages,\nwhich contain backported patches correcting these issues, and are applied\nto Apache version 2.0.46.  This update also includes fixes for a number of\nminor bugs found in this version of the Apache HTTP Server.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2004:015",
        "url": "https://access.redhat.com/errata/RHSA-2004:015"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#low",
        "url": "https://access.redhat.com/security/updates/classification/#low"
      },
      {
        "category": "external",
        "summary": "http://www.apacheweek.com/features/security-20.html",
        "url": "http://www.apacheweek.com/features/security-20.html"
      },
      {
        "category": "external",
        "summary": "105725",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=105725"
      },
      {
        "category": "external",
        "summary": "110434",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=110434"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_015.json"
      }
    ],
    "title": "Red Hat Security Advisory: httpd security update",
    "tracking": {
      "current_release_date": "2024-11-14T10:03:04+00:00",
      "generator": {
        "date": "2024-11-14T10:03:04+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.0"
        }
      },
      "id": "RHSA-2004:015",
      "initial_release_date": "2004-01-14T13:12:00+00:00",
      "revision_history": [
        {
          "date": "2004-01-14T13:12:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2004-01-13T00:00:00+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-14T10:03:04+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AS version 3",
                "product": {
                  "name": "Red Hat Enterprise Linux AS version 3",
                  "product_id": "3AS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:3::as"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Desktop version 3",
                "product": {
                  "name": "Red Hat Desktop version 3",
                  "product_id": "3Desktop",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:3::desktop"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ES version 3",
                "product": {
                  "name": "Red Hat Enterprise Linux ES version 3",
                  "product_id": "3ES",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:3::es"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux WS version 3",
                "product": {
                  "name": "Red Hat Enterprise Linux WS version 3",
                  "product_id": "3WS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:3::ws"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-devel-0:2.0.46-26.ent.ia64",
                "product": {
                  "name": "httpd-devel-0:2.0.46-26.ent.ia64",
                  "product_id": "httpd-devel-0:2.0.46-26.ent.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-devel@2.0.46-26.ent?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-0:2.0.46-26.ent.ia64",
                "product": {
                  "name": "httpd-0:2.0.46-26.ent.ia64",
                  "product_id": "httpd-0:2.0.46-26.ent.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd@2.0.46-26.ent?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-1:2.0.46-26.ent.ia64",
                "product": {
                  "name": "mod_ssl-1:2.0.46-26.ent.ia64",
                  "product_id": "mod_ssl-1:2.0.46-26.ent.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl@2.0.46-26.ent?arch=ia64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debuginfo-0:2.0.46-26.ent.ia64",
                "product": {
                  "name": "httpd-debuginfo-0:2.0.46-26.ent.ia64",
                  "product_id": "httpd-debuginfo-0:2.0.46-26.ent.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debuginfo@2.0.46-26.ent?arch=ia64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-devel-0:2.0.46-26.ent.x86_64",
                "product": {
                  "name": "httpd-devel-0:2.0.46-26.ent.x86_64",
                  "product_id": "httpd-devel-0:2.0.46-26.ent.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-devel@2.0.46-26.ent?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-0:2.0.46-26.ent.x86_64",
                "product": {
                  "name": "httpd-0:2.0.46-26.ent.x86_64",
                  "product_id": "httpd-0:2.0.46-26.ent.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd@2.0.46-26.ent?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-1:2.0.46-26.ent.x86_64",
                "product": {
                  "name": "mod_ssl-1:2.0.46-26.ent.x86_64",
                  "product_id": "mod_ssl-1:2.0.46-26.ent.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl@2.0.46-26.ent?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debuginfo-0:2.0.46-26.ent.x86_64",
                "product": {
                  "name": "httpd-debuginfo-0:2.0.46-26.ent.x86_64",
                  "product_id": "httpd-debuginfo-0:2.0.46-26.ent.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debuginfo@2.0.46-26.ent?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-devel-0:2.0.46-26.ent.i386",
                "product": {
                  "name": "httpd-devel-0:2.0.46-26.ent.i386",
                  "product_id": "httpd-devel-0:2.0.46-26.ent.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-devel@2.0.46-26.ent?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-0:2.0.46-26.ent.i386",
                "product": {
                  "name": "httpd-0:2.0.46-26.ent.i386",
                  "product_id": "httpd-0:2.0.46-26.ent.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd@2.0.46-26.ent?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-1:2.0.46-26.ent.i386",
                "product": {
                  "name": "mod_ssl-1:2.0.46-26.ent.i386",
                  "product_id": "mod_ssl-1:2.0.46-26.ent.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl@2.0.46-26.ent?arch=i386\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debuginfo-0:2.0.46-26.ent.i386",
                "product": {
                  "name": "httpd-debuginfo-0:2.0.46-26.ent.i386",
                  "product_id": "httpd-debuginfo-0:2.0.46-26.ent.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debuginfo@2.0.46-26.ent?arch=i386"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-0:2.0.46-26.ent.src",
                "product": {
                  "name": "httpd-0:2.0.46-26.ent.src",
                  "product_id": "httpd-0:2.0.46-26.ent.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd@2.0.46-26.ent?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-devel-0:2.0.46-26.ent.ppc",
                "product": {
                  "name": "httpd-devel-0:2.0.46-26.ent.ppc",
                  "product_id": "httpd-devel-0:2.0.46-26.ent.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-devel@2.0.46-26.ent?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-0:2.0.46-26.ent.ppc",
                "product": {
                  "name": "httpd-0:2.0.46-26.ent.ppc",
                  "product_id": "httpd-0:2.0.46-26.ent.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd@2.0.46-26.ent?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-1:2.0.46-26.ent.ppc",
                "product": {
                  "name": "mod_ssl-1:2.0.46-26.ent.ppc",
                  "product_id": "mod_ssl-1:2.0.46-26.ent.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl@2.0.46-26.ent?arch=ppc\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debuginfo-0:2.0.46-26.ent.ppc",
                "product": {
                  "name": "httpd-debuginfo-0:2.0.46-26.ent.ppc",
                  "product_id": "httpd-debuginfo-0:2.0.46-26.ent.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debuginfo@2.0.46-26.ent?arch=ppc"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-devel-0:2.0.46-26.ent.s390x",
                "product": {
                  "name": "httpd-devel-0:2.0.46-26.ent.s390x",
                  "product_id": "httpd-devel-0:2.0.46-26.ent.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-devel@2.0.46-26.ent?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-0:2.0.46-26.ent.s390x",
                "product": {
                  "name": "httpd-0:2.0.46-26.ent.s390x",
                  "product_id": "httpd-0:2.0.46-26.ent.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd@2.0.46-26.ent?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-1:2.0.46-26.ent.s390x",
                "product": {
                  "name": "mod_ssl-1:2.0.46-26.ent.s390x",
                  "product_id": "mod_ssl-1:2.0.46-26.ent.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl@2.0.46-26.ent?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debuginfo-0:2.0.46-26.ent.s390x",
                "product": {
                  "name": "httpd-debuginfo-0:2.0.46-26.ent.s390x",
                  "product_id": "httpd-debuginfo-0:2.0.46-26.ent.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debuginfo@2.0.46-26.ent?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-devel-0:2.0.46-26.ent.s390",
                "product": {
                  "name": "httpd-devel-0:2.0.46-26.ent.s390",
                  "product_id": "httpd-devel-0:2.0.46-26.ent.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-devel@2.0.46-26.ent?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-0:2.0.46-26.ent.s390",
                "product": {
                  "name": "httpd-0:2.0.46-26.ent.s390",
                  "product_id": "httpd-0:2.0.46-26.ent.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd@2.0.46-26.ent?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-1:2.0.46-26.ent.s390",
                "product": {
                  "name": "mod_ssl-1:2.0.46-26.ent.s390",
                  "product_id": "mod_ssl-1:2.0.46-26.ent.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl@2.0.46-26.ent?arch=s390\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debuginfo-0:2.0.46-26.ent.s390",
                "product": {
                  "name": "httpd-debuginfo-0:2.0.46-26.ent.s390",
                  "product_id": "httpd-debuginfo-0:2.0.46-26.ent.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debuginfo@2.0.46-26.ent?arch=s390"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.0.46-26.ent.i386 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:httpd-0:2.0.46-26.ent.i386"
        },
        "product_reference": "httpd-0:2.0.46-26.ent.i386",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.0.46-26.ent.ia64 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:httpd-0:2.0.46-26.ent.ia64"
        },
        "product_reference": "httpd-0:2.0.46-26.ent.ia64",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.0.46-26.ent.ppc as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:httpd-0:2.0.46-26.ent.ppc"
        },
        "product_reference": "httpd-0:2.0.46-26.ent.ppc",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.0.46-26.ent.s390 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:httpd-0:2.0.46-26.ent.s390"
        },
        "product_reference": "httpd-0:2.0.46-26.ent.s390",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.0.46-26.ent.s390x as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:httpd-0:2.0.46-26.ent.s390x"
        },
        "product_reference": "httpd-0:2.0.46-26.ent.s390x",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.0.46-26.ent.src as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:httpd-0:2.0.46-26.ent.src"
        },
        "product_reference": "httpd-0:2.0.46-26.ent.src",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.0.46-26.ent.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:httpd-0:2.0.46-26.ent.x86_64"
        },
        "product_reference": "httpd-0:2.0.46-26.ent.x86_64",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.0.46-26.ent.i386 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:httpd-debuginfo-0:2.0.46-26.ent.i386"
        },
        "product_reference": "httpd-debuginfo-0:2.0.46-26.ent.i386",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.0.46-26.ent.ia64 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:httpd-debuginfo-0:2.0.46-26.ent.ia64"
        },
        "product_reference": "httpd-debuginfo-0:2.0.46-26.ent.ia64",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.0.46-26.ent.ppc as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:httpd-debuginfo-0:2.0.46-26.ent.ppc"
        },
        "product_reference": "httpd-debuginfo-0:2.0.46-26.ent.ppc",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.0.46-26.ent.s390 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:httpd-debuginfo-0:2.0.46-26.ent.s390"
        },
        "product_reference": "httpd-debuginfo-0:2.0.46-26.ent.s390",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.0.46-26.ent.s390x as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:httpd-debuginfo-0:2.0.46-26.ent.s390x"
        },
        "product_reference": "httpd-debuginfo-0:2.0.46-26.ent.s390x",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.0.46-26.ent.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:httpd-debuginfo-0:2.0.46-26.ent.x86_64"
        },
        "product_reference": "httpd-debuginfo-0:2.0.46-26.ent.x86_64",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.0.46-26.ent.i386 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:httpd-devel-0:2.0.46-26.ent.i386"
        },
        "product_reference": "httpd-devel-0:2.0.46-26.ent.i386",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.0.46-26.ent.ia64 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:httpd-devel-0:2.0.46-26.ent.ia64"
        },
        "product_reference": "httpd-devel-0:2.0.46-26.ent.ia64",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.0.46-26.ent.ppc as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:httpd-devel-0:2.0.46-26.ent.ppc"
        },
        "product_reference": "httpd-devel-0:2.0.46-26.ent.ppc",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.0.46-26.ent.s390 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:httpd-devel-0:2.0.46-26.ent.s390"
        },
        "product_reference": "httpd-devel-0:2.0.46-26.ent.s390",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.0.46-26.ent.s390x as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:httpd-devel-0:2.0.46-26.ent.s390x"
        },
        "product_reference": "httpd-devel-0:2.0.46-26.ent.s390x",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.0.46-26.ent.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:httpd-devel-0:2.0.46-26.ent.x86_64"
        },
        "product_reference": "httpd-devel-0:2.0.46-26.ent.x86_64",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.0.46-26.ent.i386 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:mod_ssl-1:2.0.46-26.ent.i386"
        },
        "product_reference": "mod_ssl-1:2.0.46-26.ent.i386",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.0.46-26.ent.ia64 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:mod_ssl-1:2.0.46-26.ent.ia64"
        },
        "product_reference": "mod_ssl-1:2.0.46-26.ent.ia64",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.0.46-26.ent.ppc as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:mod_ssl-1:2.0.46-26.ent.ppc"
        },
        "product_reference": "mod_ssl-1:2.0.46-26.ent.ppc",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.0.46-26.ent.s390 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:mod_ssl-1:2.0.46-26.ent.s390"
        },
        "product_reference": "mod_ssl-1:2.0.46-26.ent.s390",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.0.46-26.ent.s390x as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:mod_ssl-1:2.0.46-26.ent.s390x"
        },
        "product_reference": "mod_ssl-1:2.0.46-26.ent.s390x",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.0.46-26.ent.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:mod_ssl-1:2.0.46-26.ent.x86_64"
        },
        "product_reference": "mod_ssl-1:2.0.46-26.ent.x86_64",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.0.46-26.ent.i386 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:httpd-0:2.0.46-26.ent.i386"
        },
        "product_reference": "httpd-0:2.0.46-26.ent.i386",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.0.46-26.ent.ia64 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:httpd-0:2.0.46-26.ent.ia64"
        },
        "product_reference": "httpd-0:2.0.46-26.ent.ia64",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.0.46-26.ent.ppc as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:httpd-0:2.0.46-26.ent.ppc"
        },
        "product_reference": "httpd-0:2.0.46-26.ent.ppc",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.0.46-26.ent.s390 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:httpd-0:2.0.46-26.ent.s390"
        },
        "product_reference": "httpd-0:2.0.46-26.ent.s390",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.0.46-26.ent.s390x as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:httpd-0:2.0.46-26.ent.s390x"
        },
        "product_reference": "httpd-0:2.0.46-26.ent.s390x",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.0.46-26.ent.src as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:httpd-0:2.0.46-26.ent.src"
        },
        "product_reference": "httpd-0:2.0.46-26.ent.src",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.0.46-26.ent.x86_64 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:httpd-0:2.0.46-26.ent.x86_64"
        },
        "product_reference": "httpd-0:2.0.46-26.ent.x86_64",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.0.46-26.ent.i386 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:httpd-debuginfo-0:2.0.46-26.ent.i386"
        },
        "product_reference": "httpd-debuginfo-0:2.0.46-26.ent.i386",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.0.46-26.ent.ia64 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:httpd-debuginfo-0:2.0.46-26.ent.ia64"
        },
        "product_reference": "httpd-debuginfo-0:2.0.46-26.ent.ia64",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.0.46-26.ent.ppc as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:httpd-debuginfo-0:2.0.46-26.ent.ppc"
        },
        "product_reference": "httpd-debuginfo-0:2.0.46-26.ent.ppc",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.0.46-26.ent.s390 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:httpd-debuginfo-0:2.0.46-26.ent.s390"
        },
        "product_reference": "httpd-debuginfo-0:2.0.46-26.ent.s390",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.0.46-26.ent.s390x as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:httpd-debuginfo-0:2.0.46-26.ent.s390x"
        },
        "product_reference": "httpd-debuginfo-0:2.0.46-26.ent.s390x",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.0.46-26.ent.x86_64 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:httpd-debuginfo-0:2.0.46-26.ent.x86_64"
        },
        "product_reference": "httpd-debuginfo-0:2.0.46-26.ent.x86_64",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.0.46-26.ent.i386 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:httpd-devel-0:2.0.46-26.ent.i386"
        },
        "product_reference": "httpd-devel-0:2.0.46-26.ent.i386",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.0.46-26.ent.ia64 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:httpd-devel-0:2.0.46-26.ent.ia64"
        },
        "product_reference": "httpd-devel-0:2.0.46-26.ent.ia64",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.0.46-26.ent.ppc as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:httpd-devel-0:2.0.46-26.ent.ppc"
        },
        "product_reference": "httpd-devel-0:2.0.46-26.ent.ppc",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.0.46-26.ent.s390 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:httpd-devel-0:2.0.46-26.ent.s390"
        },
        "product_reference": "httpd-devel-0:2.0.46-26.ent.s390",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.0.46-26.ent.s390x as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:httpd-devel-0:2.0.46-26.ent.s390x"
        },
        "product_reference": "httpd-devel-0:2.0.46-26.ent.s390x",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.0.46-26.ent.x86_64 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:httpd-devel-0:2.0.46-26.ent.x86_64"
        },
        "product_reference": "httpd-devel-0:2.0.46-26.ent.x86_64",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.0.46-26.ent.i386 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:mod_ssl-1:2.0.46-26.ent.i386"
        },
        "product_reference": "mod_ssl-1:2.0.46-26.ent.i386",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.0.46-26.ent.ia64 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:mod_ssl-1:2.0.46-26.ent.ia64"
        },
        "product_reference": "mod_ssl-1:2.0.46-26.ent.ia64",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.0.46-26.ent.ppc as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:mod_ssl-1:2.0.46-26.ent.ppc"
        },
        "product_reference": "mod_ssl-1:2.0.46-26.ent.ppc",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.0.46-26.ent.s390 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:mod_ssl-1:2.0.46-26.ent.s390"
        },
        "product_reference": "mod_ssl-1:2.0.46-26.ent.s390",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.0.46-26.ent.s390x as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:mod_ssl-1:2.0.46-26.ent.s390x"
        },
        "product_reference": "mod_ssl-1:2.0.46-26.ent.s390x",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.0.46-26.ent.x86_64 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:mod_ssl-1:2.0.46-26.ent.x86_64"
        },
        "product_reference": "mod_ssl-1:2.0.46-26.ent.x86_64",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.0.46-26.ent.i386 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:httpd-0:2.0.46-26.ent.i386"
        },
        "product_reference": "httpd-0:2.0.46-26.ent.i386",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.0.46-26.ent.ia64 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:httpd-0:2.0.46-26.ent.ia64"
        },
        "product_reference": "httpd-0:2.0.46-26.ent.ia64",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.0.46-26.ent.ppc as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:httpd-0:2.0.46-26.ent.ppc"
        },
        "product_reference": "httpd-0:2.0.46-26.ent.ppc",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.0.46-26.ent.s390 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:httpd-0:2.0.46-26.ent.s390"
        },
        "product_reference": "httpd-0:2.0.46-26.ent.s390",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.0.46-26.ent.s390x as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:httpd-0:2.0.46-26.ent.s390x"
        },
        "product_reference": "httpd-0:2.0.46-26.ent.s390x",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.0.46-26.ent.src as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:httpd-0:2.0.46-26.ent.src"
        },
        "product_reference": "httpd-0:2.0.46-26.ent.src",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.0.46-26.ent.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:httpd-0:2.0.46-26.ent.x86_64"
        },
        "product_reference": "httpd-0:2.0.46-26.ent.x86_64",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.0.46-26.ent.i386 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:httpd-debuginfo-0:2.0.46-26.ent.i386"
        },
        "product_reference": "httpd-debuginfo-0:2.0.46-26.ent.i386",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.0.46-26.ent.ia64 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:httpd-debuginfo-0:2.0.46-26.ent.ia64"
        },
        "product_reference": "httpd-debuginfo-0:2.0.46-26.ent.ia64",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.0.46-26.ent.ppc as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:httpd-debuginfo-0:2.0.46-26.ent.ppc"
        },
        "product_reference": "httpd-debuginfo-0:2.0.46-26.ent.ppc",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.0.46-26.ent.s390 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:httpd-debuginfo-0:2.0.46-26.ent.s390"
        },
        "product_reference": "httpd-debuginfo-0:2.0.46-26.ent.s390",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.0.46-26.ent.s390x as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:httpd-debuginfo-0:2.0.46-26.ent.s390x"
        },
        "product_reference": "httpd-debuginfo-0:2.0.46-26.ent.s390x",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.0.46-26.ent.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:httpd-debuginfo-0:2.0.46-26.ent.x86_64"
        },
        "product_reference": "httpd-debuginfo-0:2.0.46-26.ent.x86_64",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.0.46-26.ent.i386 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:httpd-devel-0:2.0.46-26.ent.i386"
        },
        "product_reference": "httpd-devel-0:2.0.46-26.ent.i386",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.0.46-26.ent.ia64 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:httpd-devel-0:2.0.46-26.ent.ia64"
        },
        "product_reference": "httpd-devel-0:2.0.46-26.ent.ia64",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.0.46-26.ent.ppc as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:httpd-devel-0:2.0.46-26.ent.ppc"
        },
        "product_reference": "httpd-devel-0:2.0.46-26.ent.ppc",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.0.46-26.ent.s390 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:httpd-devel-0:2.0.46-26.ent.s390"
        },
        "product_reference": "httpd-devel-0:2.0.46-26.ent.s390",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.0.46-26.ent.s390x as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:httpd-devel-0:2.0.46-26.ent.s390x"
        },
        "product_reference": "httpd-devel-0:2.0.46-26.ent.s390x",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.0.46-26.ent.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:httpd-devel-0:2.0.46-26.ent.x86_64"
        },
        "product_reference": "httpd-devel-0:2.0.46-26.ent.x86_64",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.0.46-26.ent.i386 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:mod_ssl-1:2.0.46-26.ent.i386"
        },
        "product_reference": "mod_ssl-1:2.0.46-26.ent.i386",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.0.46-26.ent.ia64 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:mod_ssl-1:2.0.46-26.ent.ia64"
        },
        "product_reference": "mod_ssl-1:2.0.46-26.ent.ia64",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.0.46-26.ent.ppc as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:mod_ssl-1:2.0.46-26.ent.ppc"
        },
        "product_reference": "mod_ssl-1:2.0.46-26.ent.ppc",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.0.46-26.ent.s390 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:mod_ssl-1:2.0.46-26.ent.s390"
        },
        "product_reference": "mod_ssl-1:2.0.46-26.ent.s390",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.0.46-26.ent.s390x as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:mod_ssl-1:2.0.46-26.ent.s390x"
        },
        "product_reference": "mod_ssl-1:2.0.46-26.ent.s390x",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.0.46-26.ent.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:mod_ssl-1:2.0.46-26.ent.x86_64"
        },
        "product_reference": "mod_ssl-1:2.0.46-26.ent.x86_64",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.0.46-26.ent.i386 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:httpd-0:2.0.46-26.ent.i386"
        },
        "product_reference": "httpd-0:2.0.46-26.ent.i386",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.0.46-26.ent.ia64 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:httpd-0:2.0.46-26.ent.ia64"
        },
        "product_reference": "httpd-0:2.0.46-26.ent.ia64",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.0.46-26.ent.ppc as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:httpd-0:2.0.46-26.ent.ppc"
        },
        "product_reference": "httpd-0:2.0.46-26.ent.ppc",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.0.46-26.ent.s390 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:httpd-0:2.0.46-26.ent.s390"
        },
        "product_reference": "httpd-0:2.0.46-26.ent.s390",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.0.46-26.ent.s390x as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:httpd-0:2.0.46-26.ent.s390x"
        },
        "product_reference": "httpd-0:2.0.46-26.ent.s390x",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.0.46-26.ent.src as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:httpd-0:2.0.46-26.ent.src"
        },
        "product_reference": "httpd-0:2.0.46-26.ent.src",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.0.46-26.ent.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:httpd-0:2.0.46-26.ent.x86_64"
        },
        "product_reference": "httpd-0:2.0.46-26.ent.x86_64",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.0.46-26.ent.i386 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:httpd-debuginfo-0:2.0.46-26.ent.i386"
        },
        "product_reference": "httpd-debuginfo-0:2.0.46-26.ent.i386",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.0.46-26.ent.ia64 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:httpd-debuginfo-0:2.0.46-26.ent.ia64"
        },
        "product_reference": "httpd-debuginfo-0:2.0.46-26.ent.ia64",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.0.46-26.ent.ppc as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:httpd-debuginfo-0:2.0.46-26.ent.ppc"
        },
        "product_reference": "httpd-debuginfo-0:2.0.46-26.ent.ppc",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.0.46-26.ent.s390 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:httpd-debuginfo-0:2.0.46-26.ent.s390"
        },
        "product_reference": "httpd-debuginfo-0:2.0.46-26.ent.s390",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.0.46-26.ent.s390x as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:httpd-debuginfo-0:2.0.46-26.ent.s390x"
        },
        "product_reference": "httpd-debuginfo-0:2.0.46-26.ent.s390x",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.0.46-26.ent.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:httpd-debuginfo-0:2.0.46-26.ent.x86_64"
        },
        "product_reference": "httpd-debuginfo-0:2.0.46-26.ent.x86_64",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.0.46-26.ent.i386 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:httpd-devel-0:2.0.46-26.ent.i386"
        },
        "product_reference": "httpd-devel-0:2.0.46-26.ent.i386",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.0.46-26.ent.ia64 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:httpd-devel-0:2.0.46-26.ent.ia64"
        },
        "product_reference": "httpd-devel-0:2.0.46-26.ent.ia64",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.0.46-26.ent.ppc as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:httpd-devel-0:2.0.46-26.ent.ppc"
        },
        "product_reference": "httpd-devel-0:2.0.46-26.ent.ppc",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.0.46-26.ent.s390 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:httpd-devel-0:2.0.46-26.ent.s390"
        },
        "product_reference": "httpd-devel-0:2.0.46-26.ent.s390",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.0.46-26.ent.s390x as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:httpd-devel-0:2.0.46-26.ent.s390x"
        },
        "product_reference": "httpd-devel-0:2.0.46-26.ent.s390x",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.0.46-26.ent.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:httpd-devel-0:2.0.46-26.ent.x86_64"
        },
        "product_reference": "httpd-devel-0:2.0.46-26.ent.x86_64",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.0.46-26.ent.i386 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:mod_ssl-1:2.0.46-26.ent.i386"
        },
        "product_reference": "mod_ssl-1:2.0.46-26.ent.i386",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.0.46-26.ent.ia64 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:mod_ssl-1:2.0.46-26.ent.ia64"
        },
        "product_reference": "mod_ssl-1:2.0.46-26.ent.ia64",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.0.46-26.ent.ppc as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:mod_ssl-1:2.0.46-26.ent.ppc"
        },
        "product_reference": "mod_ssl-1:2.0.46-26.ent.ppc",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.0.46-26.ent.s390 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:mod_ssl-1:2.0.46-26.ent.s390"
        },
        "product_reference": "mod_ssl-1:2.0.46-26.ent.s390",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.0.46-26.ent.s390x as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:mod_ssl-1:2.0.46-26.ent.s390x"
        },
        "product_reference": "mod_ssl-1:2.0.46-26.ent.s390x",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.0.46-26.ent.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:mod_ssl-1:2.0.46-26.ent.x86_64"
        },
        "product_reference": "mod_ssl-1:2.0.46-26.ent.x86_64",
        "relates_to_product_reference": "3WS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2003-0542",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1617048"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple stack-based buffer overflows in (1) mod_alias and (2) mod_rewrite for Apache before 1.3.29 allow attackers to create configuration files to cause a denial of service (crash) or execute arbitrary code via a regular expression with more than 9 captures.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS:httpd-0:2.0.46-26.ent.i386",
          "3AS:httpd-0:2.0.46-26.ent.ia64",
          "3AS:httpd-0:2.0.46-26.ent.ppc",
          "3AS:httpd-0:2.0.46-26.ent.s390",
          "3AS:httpd-0:2.0.46-26.ent.s390x",
          "3AS:httpd-0:2.0.46-26.ent.src",
          "3AS:httpd-0:2.0.46-26.ent.x86_64",
          "3AS:httpd-debuginfo-0:2.0.46-26.ent.i386",
          "3AS:httpd-debuginfo-0:2.0.46-26.ent.ia64",
          "3AS:httpd-debuginfo-0:2.0.46-26.ent.ppc",
          "3AS:httpd-debuginfo-0:2.0.46-26.ent.s390",
          "3AS:httpd-debuginfo-0:2.0.46-26.ent.s390x",
          "3AS:httpd-debuginfo-0:2.0.46-26.ent.x86_64",
          "3AS:httpd-devel-0:2.0.46-26.ent.i386",
          "3AS:httpd-devel-0:2.0.46-26.ent.ia64",
          "3AS:httpd-devel-0:2.0.46-26.ent.ppc",
          "3AS:httpd-devel-0:2.0.46-26.ent.s390",
          "3AS:httpd-devel-0:2.0.46-26.ent.s390x",
          "3AS:httpd-devel-0:2.0.46-26.ent.x86_64",
          "3AS:mod_ssl-1:2.0.46-26.ent.i386",
          "3AS:mod_ssl-1:2.0.46-26.ent.ia64",
          "3AS:mod_ssl-1:2.0.46-26.ent.ppc",
          "3AS:mod_ssl-1:2.0.46-26.ent.s390",
          "3AS:mod_ssl-1:2.0.46-26.ent.s390x",
          "3AS:mod_ssl-1:2.0.46-26.ent.x86_64",
          "3Desktop:httpd-0:2.0.46-26.ent.i386",
          "3Desktop:httpd-0:2.0.46-26.ent.ia64",
          "3Desktop:httpd-0:2.0.46-26.ent.ppc",
          "3Desktop:httpd-0:2.0.46-26.ent.s390",
          "3Desktop:httpd-0:2.0.46-26.ent.s390x",
          "3Desktop:httpd-0:2.0.46-26.ent.src",
          "3Desktop:httpd-0:2.0.46-26.ent.x86_64",
          "3Desktop:httpd-debuginfo-0:2.0.46-26.ent.i386",
          "3Desktop:httpd-debuginfo-0:2.0.46-26.ent.ia64",
          "3Desktop:httpd-debuginfo-0:2.0.46-26.ent.ppc",
          "3Desktop:httpd-debuginfo-0:2.0.46-26.ent.s390",
          "3Desktop:httpd-debuginfo-0:2.0.46-26.ent.s390x",
          "3Desktop:httpd-debuginfo-0:2.0.46-26.ent.x86_64",
          "3Desktop:httpd-devel-0:2.0.46-26.ent.i386",
          "3Desktop:httpd-devel-0:2.0.46-26.ent.ia64",
          "3Desktop:httpd-devel-0:2.0.46-26.ent.ppc",
          "3Desktop:httpd-devel-0:2.0.46-26.ent.s390",
          "3Desktop:httpd-devel-0:2.0.46-26.ent.s390x",
          "3Desktop:httpd-devel-0:2.0.46-26.ent.x86_64",
          "3Desktop:mod_ssl-1:2.0.46-26.ent.i386",
          "3Desktop:mod_ssl-1:2.0.46-26.ent.ia64",
          "3Desktop:mod_ssl-1:2.0.46-26.ent.ppc",
          "3Desktop:mod_ssl-1:2.0.46-26.ent.s390",
          "3Desktop:mod_ssl-1:2.0.46-26.ent.s390x",
          "3Desktop:mod_ssl-1:2.0.46-26.ent.x86_64",
          "3ES:httpd-0:2.0.46-26.ent.i386",
          "3ES:httpd-0:2.0.46-26.ent.ia64",
          "3ES:httpd-0:2.0.46-26.ent.ppc",
          "3ES:httpd-0:2.0.46-26.ent.s390",
          "3ES:httpd-0:2.0.46-26.ent.s390x",
          "3ES:httpd-0:2.0.46-26.ent.src",
          "3ES:httpd-0:2.0.46-26.ent.x86_64",
          "3ES:httpd-debuginfo-0:2.0.46-26.ent.i386",
          "3ES:httpd-debuginfo-0:2.0.46-26.ent.ia64",
          "3ES:httpd-debuginfo-0:2.0.46-26.ent.ppc",
          "3ES:httpd-debuginfo-0:2.0.46-26.ent.s390",
          "3ES:httpd-debuginfo-0:2.0.46-26.ent.s390x",
          "3ES:httpd-debuginfo-0:2.0.46-26.ent.x86_64",
          "3ES:httpd-devel-0:2.0.46-26.ent.i386",
          "3ES:httpd-devel-0:2.0.46-26.ent.ia64",
          "3ES:httpd-devel-0:2.0.46-26.ent.ppc",
          "3ES:httpd-devel-0:2.0.46-26.ent.s390",
          "3ES:httpd-devel-0:2.0.46-26.ent.s390x",
          "3ES:httpd-devel-0:2.0.46-26.ent.x86_64",
          "3ES:mod_ssl-1:2.0.46-26.ent.i386",
          "3ES:mod_ssl-1:2.0.46-26.ent.ia64",
          "3ES:mod_ssl-1:2.0.46-26.ent.ppc",
          "3ES:mod_ssl-1:2.0.46-26.ent.s390",
          "3ES:mod_ssl-1:2.0.46-26.ent.s390x",
          "3ES:mod_ssl-1:2.0.46-26.ent.x86_64",
          "3WS:httpd-0:2.0.46-26.ent.i386",
          "3WS:httpd-0:2.0.46-26.ent.ia64",
          "3WS:httpd-0:2.0.46-26.ent.ppc",
          "3WS:httpd-0:2.0.46-26.ent.s390",
          "3WS:httpd-0:2.0.46-26.ent.s390x",
          "3WS:httpd-0:2.0.46-26.ent.src",
          "3WS:httpd-0:2.0.46-26.ent.x86_64",
          "3WS:httpd-debuginfo-0:2.0.46-26.ent.i386",
          "3WS:httpd-debuginfo-0:2.0.46-26.ent.ia64",
          "3WS:httpd-debuginfo-0:2.0.46-26.ent.ppc",
          "3WS:httpd-debuginfo-0:2.0.46-26.ent.s390",
          "3WS:httpd-debuginfo-0:2.0.46-26.ent.s390x",
          "3WS:httpd-debuginfo-0:2.0.46-26.ent.x86_64",
          "3WS:httpd-devel-0:2.0.46-26.ent.i386",
          "3WS:httpd-devel-0:2.0.46-26.ent.ia64",
          "3WS:httpd-devel-0:2.0.46-26.ent.ppc",
          "3WS:httpd-devel-0:2.0.46-26.ent.s390",
          "3WS:httpd-devel-0:2.0.46-26.ent.s390x",
          "3WS:httpd-devel-0:2.0.46-26.ent.x86_64",
          "3WS:mod_ssl-1:2.0.46-26.ent.i386",
          "3WS:mod_ssl-1:2.0.46-26.ent.ia64",
          "3WS:mod_ssl-1:2.0.46-26.ent.ppc",
          "3WS:mod_ssl-1:2.0.46-26.ent.s390",
          "3WS:mod_ssl-1:2.0.46-26.ent.s390x",
          "3WS:mod_ssl-1:2.0.46-26.ent.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2003-0542"
        },
        {
          "category": "external",
          "summary": "RHBZ#1617048",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617048"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2003-0542",
          "url": "https://www.cve.org/CVERecord?id=CVE-2003-0542"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2003-0542",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2003-0542"
        }
      ],
      "release_date": "2003-10-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2004-01-14T13:12:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo update all RPMs for your particular architecture, run:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade.  Only those\nRPMs which are currently installed will be updated.  Those RPMs which are\nnot installed but included in the list will not be updated.  Note that you\ncan also use wildcards (*.rpm) if your current directory *only* contains\nthe desired RPMs.\n\nPlease note that this update is also available via Red Hat Network.  Many\npeople find this an easier way to apply updates.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.\n\nIf up2date fails to connect to Red Hat Network due to SSL\nCertificate Errors, you need to install a version of the\nup2date client with an updated certificate.  The latest version of\nup2date is available from the Red Hat FTP site and may also be\ndownloaded directly from the RHN website:\n\nhttps://rhn.redhat.com/help/latest-up2date.pxt",
          "product_ids": [
            "3AS:httpd-0:2.0.46-26.ent.i386",
            "3AS:httpd-0:2.0.46-26.ent.ia64",
            "3AS:httpd-0:2.0.46-26.ent.ppc",
            "3AS:httpd-0:2.0.46-26.ent.s390",
            "3AS:httpd-0:2.0.46-26.ent.s390x",
            "3AS:httpd-0:2.0.46-26.ent.src",
            "3AS:httpd-0:2.0.46-26.ent.x86_64",
            "3AS:httpd-debuginfo-0:2.0.46-26.ent.i386",
            "3AS:httpd-debuginfo-0:2.0.46-26.ent.ia64",
            "3AS:httpd-debuginfo-0:2.0.46-26.ent.ppc",
            "3AS:httpd-debuginfo-0:2.0.46-26.ent.s390",
            "3AS:httpd-debuginfo-0:2.0.46-26.ent.s390x",
            "3AS:httpd-debuginfo-0:2.0.46-26.ent.x86_64",
            "3AS:httpd-devel-0:2.0.46-26.ent.i386",
            "3AS:httpd-devel-0:2.0.46-26.ent.ia64",
            "3AS:httpd-devel-0:2.0.46-26.ent.ppc",
            "3AS:httpd-devel-0:2.0.46-26.ent.s390",
            "3AS:httpd-devel-0:2.0.46-26.ent.s390x",
            "3AS:httpd-devel-0:2.0.46-26.ent.x86_64",
            "3AS:mod_ssl-1:2.0.46-26.ent.i386",
            "3AS:mod_ssl-1:2.0.46-26.ent.ia64",
            "3AS:mod_ssl-1:2.0.46-26.ent.ppc",
            "3AS:mod_ssl-1:2.0.46-26.ent.s390",
            "3AS:mod_ssl-1:2.0.46-26.ent.s390x",
            "3AS:mod_ssl-1:2.0.46-26.ent.x86_64",
            "3Desktop:httpd-0:2.0.46-26.ent.i386",
            "3Desktop:httpd-0:2.0.46-26.ent.ia64",
            "3Desktop:httpd-0:2.0.46-26.ent.ppc",
            "3Desktop:httpd-0:2.0.46-26.ent.s390",
            "3Desktop:httpd-0:2.0.46-26.ent.s390x",
            "3Desktop:httpd-0:2.0.46-26.ent.src",
            "3Desktop:httpd-0:2.0.46-26.ent.x86_64",
            "3Desktop:httpd-debuginfo-0:2.0.46-26.ent.i386",
            "3Desktop:httpd-debuginfo-0:2.0.46-26.ent.ia64",
            "3Desktop:httpd-debuginfo-0:2.0.46-26.ent.ppc",
            "3Desktop:httpd-debuginfo-0:2.0.46-26.ent.s390",
            "3Desktop:httpd-debuginfo-0:2.0.46-26.ent.s390x",
            "3Desktop:httpd-debuginfo-0:2.0.46-26.ent.x86_64",
            "3Desktop:httpd-devel-0:2.0.46-26.ent.i386",
            "3Desktop:httpd-devel-0:2.0.46-26.ent.ia64",
            "3Desktop:httpd-devel-0:2.0.46-26.ent.ppc",
            "3Desktop:httpd-devel-0:2.0.46-26.ent.s390",
            "3Desktop:httpd-devel-0:2.0.46-26.ent.s390x",
            "3Desktop:httpd-devel-0:2.0.46-26.ent.x86_64",
            "3Desktop:mod_ssl-1:2.0.46-26.ent.i386",
            "3Desktop:mod_ssl-1:2.0.46-26.ent.ia64",
            "3Desktop:mod_ssl-1:2.0.46-26.ent.ppc",
            "3Desktop:mod_ssl-1:2.0.46-26.ent.s390",
            "3Desktop:mod_ssl-1:2.0.46-26.ent.s390x",
            "3Desktop:mod_ssl-1:2.0.46-26.ent.x86_64",
            "3ES:httpd-0:2.0.46-26.ent.i386",
            "3ES:httpd-0:2.0.46-26.ent.ia64",
            "3ES:httpd-0:2.0.46-26.ent.ppc",
            "3ES:httpd-0:2.0.46-26.ent.s390",
            "3ES:httpd-0:2.0.46-26.ent.s390x",
            "3ES:httpd-0:2.0.46-26.ent.src",
            "3ES:httpd-0:2.0.46-26.ent.x86_64",
            "3ES:httpd-debuginfo-0:2.0.46-26.ent.i386",
            "3ES:httpd-debuginfo-0:2.0.46-26.ent.ia64",
            "3ES:httpd-debuginfo-0:2.0.46-26.ent.ppc",
            "3ES:httpd-debuginfo-0:2.0.46-26.ent.s390",
            "3ES:httpd-debuginfo-0:2.0.46-26.ent.s390x",
            "3ES:httpd-debuginfo-0:2.0.46-26.ent.x86_64",
            "3ES:httpd-devel-0:2.0.46-26.ent.i386",
            "3ES:httpd-devel-0:2.0.46-26.ent.ia64",
            "3ES:httpd-devel-0:2.0.46-26.ent.ppc",
            "3ES:httpd-devel-0:2.0.46-26.ent.s390",
            "3ES:httpd-devel-0:2.0.46-26.ent.s390x",
            "3ES:httpd-devel-0:2.0.46-26.ent.x86_64",
            "3ES:mod_ssl-1:2.0.46-26.ent.i386",
            "3ES:mod_ssl-1:2.0.46-26.ent.ia64",
            "3ES:mod_ssl-1:2.0.46-26.ent.ppc",
            "3ES:mod_ssl-1:2.0.46-26.ent.s390",
            "3ES:mod_ssl-1:2.0.46-26.ent.s390x",
            "3ES:mod_ssl-1:2.0.46-26.ent.x86_64",
            "3WS:httpd-0:2.0.46-26.ent.i386",
            "3WS:httpd-0:2.0.46-26.ent.ia64",
            "3WS:httpd-0:2.0.46-26.ent.ppc",
            "3WS:httpd-0:2.0.46-26.ent.s390",
            "3WS:httpd-0:2.0.46-26.ent.s390x",
            "3WS:httpd-0:2.0.46-26.ent.src",
            "3WS:httpd-0:2.0.46-26.ent.x86_64",
            "3WS:httpd-debuginfo-0:2.0.46-26.ent.i386",
            "3WS:httpd-debuginfo-0:2.0.46-26.ent.ia64",
            "3WS:httpd-debuginfo-0:2.0.46-26.ent.ppc",
            "3WS:httpd-debuginfo-0:2.0.46-26.ent.s390",
            "3WS:httpd-debuginfo-0:2.0.46-26.ent.s390x",
            "3WS:httpd-debuginfo-0:2.0.46-26.ent.x86_64",
            "3WS:httpd-devel-0:2.0.46-26.ent.i386",
            "3WS:httpd-devel-0:2.0.46-26.ent.ia64",
            "3WS:httpd-devel-0:2.0.46-26.ent.ppc",
            "3WS:httpd-devel-0:2.0.46-26.ent.s390",
            "3WS:httpd-devel-0:2.0.46-26.ent.s390x",
            "3WS:httpd-devel-0:2.0.46-26.ent.x86_64",
            "3WS:mod_ssl-1:2.0.46-26.ent.i386",
            "3WS:mod_ssl-1:2.0.46-26.ent.ia64",
            "3WS:mod_ssl-1:2.0.46-26.ent.ppc",
            "3WS:mod_ssl-1:2.0.46-26.ent.s390",
            "3WS:mod_ssl-1:2.0.46-26.ent.s390x",
            "3WS:mod_ssl-1:2.0.46-26.ent.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2004:015"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "security flaw"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated httpd packages that fix two minor security issues in the Apache Web\nserver are now available for Red Hat Linux 8.0 and 9.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The Apache HTTP Server is a powerful, full-featured, efficient, and\nfreely-available Web server.\n\nAn issue in the handling of regular expressions from configuration files\nwas discovered in releases of the Apache HTTP Server version 2.0 prior to\n2.0.48.  To exploit this issue an attacker would need to have the ability\nto write to Apache configuration files such as .htaccess or httpd.conf.  A\ncarefully-crafted configuration file can cause an exploitable buffer\noverflow and would allow the attacker to execute arbitrary code in the\ncontext of the server (in default configurations as the \u0027apache\u0027 user).\nThe Common Vulnerabilities and Exposures project (cve.mitre.org) has\nassigned the name CAN-2003-0542 to this issue.\n\nA bug in the CGI daemon-based \"mod_cgid\" module was discovered that can\nresult in CGI script output being sent to the wrong client. This issue only\naffects Red Hat Linux 9, and only when the server is configured to use the\n\"worker\" MPM. The default configuration uses the \"mod_cgi\" module for CGI\nand is not affected by this issue. The Common Vulnerabilities and Exposures\nproject (cve.mitre.org) has assigned the name CAN-2003-0789 to this issue.\n\nUsers of the Apache HTTP Server should upgrade to these erratum packages,\nwhich contain backported patches correcting these issues, and are applied\nto Apache version 2.0.40.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2003:320",
        "url": "https://access.redhat.com/errata/RHSA-2003:320"
      },
      {
        "category": "external",
        "summary": "http://www.apacheweek.com/features/security-20.html",
        "url": "http://www.apacheweek.com/features/security-20.html"
      },
      {
        "category": "external",
        "summary": "103049",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=103049"
      },
      {
        "category": "external",
        "summary": "103744",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=103744"
      },
      {
        "category": "external",
        "summary": "105725",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=105725"
      },
      {
        "category": "external",
        "summary": "106454",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=106454"
      },
      {
        "category": "external",
        "summary": "106858",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=106858"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2003/rhsa-2003_320.json"
      }
    ],
    "title": "Red Hat Security Advisory: : Updated httpd packages fix Apache security vulnerabilities",
    "tracking": {
      "current_release_date": "2024-11-21T22:53:10+00:00",
      "generator": {
        "date": "2024-11-21T22:53:10+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2003:320",
      "initial_release_date": "2003-12-16T21:48:00+00:00",
      "revision_history": [
        {
          "date": "2003-12-16T21:48:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2003-12-16T00:00:00+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-21T22:53:10+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Linux 8.0",
                "product": {
                  "name": "Red Hat Linux 8.0",
                  "product_id": "Red Hat Linux 8.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:linux:8.0"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Linux 9",
                "product": {
                  "name": "Red Hat Linux 9",
                  "product_id": "Red Hat Linux 9",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:linux:9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Linux"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2003-0542",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1617048"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple stack-based buffer overflows in (1) mod_alias and (2) mod_rewrite for Apache before 1.3.29 allow attackers to create configuration files to cause a denial of service (crash) or execute arbitrary code via a regular expression with more than 9 captures.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Linux 8.0",
          "Red Hat Linux 9"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2003-0542"
        },
        {
          "category": "external",
          "summary": "RHBZ#1617048",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617048"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2003-0542",
          "url": "https://www.cve.org/CVERecord?id=CVE-2003-0542"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2003-0542",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2003-0542"
        }
      ],
      "release_date": "2003-10-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2003-12-16T21:48:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nAfter the errata packages are installed, restart the HTTP service by\nrunning (as root) the following command:\n\n/sbin/service httpd restart\n\nTo update all RPMs for your particular architecture, run:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade.  Only those\nRPMs which are currently installed will be updated.  Those RPMs which are\nnot installed but included in the list will not be updated.  Note that you\ncan also use wildcards (*.rpm) if your current directory *only* contains the\ndesired RPMs.\n\nPlease note that this update is also available via Red Hat Network.  Many\npeople find this an easier way to apply updates.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.\n\nIf up2date fails to connect to Red Hat Network due to SSL Certificate \nErrors, you need to install a version of the up2date client with an updated \ncertificate.  The latest version of up2date is available from the Red Hat \nFTP site and may also be downloaded directly from the RHN website:\n\nhttps://rhn.redhat.com/help/latest-up2date.pxt",
          "product_ids": [
            "Red Hat Linux 8.0",
            "Red Hat Linux 9"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2003:320"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "security flaw"
    },
    {
      "cve": "CVE-2003-0789",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1617086"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "mod_cgid in Apache before 2.0.48, when using a threaded MPM, does not properly handle CGI redirect paths, which could cause Apache to send the output of a CGI program to the wrong client.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Linux 8.0",
          "Red Hat Linux 9"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2003-0789"
        },
        {
          "category": "external",
          "summary": "RHBZ#1617086",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617086"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2003-0789",
          "url": "https://www.cve.org/CVERecord?id=CVE-2003-0789"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2003-0789",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2003-0789"
        }
      ],
      "release_date": "2003-10-28T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2003-12-16T21:48:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nAfter the errata packages are installed, restart the HTTP service by\nrunning (as root) the following command:\n\n/sbin/service httpd restart\n\nTo update all RPMs for your particular architecture, run:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade.  Only those\nRPMs which are currently installed will be updated.  Those RPMs which are\nnot installed but included in the list will not be updated.  Note that you\ncan also use wildcards (*.rpm) if your current directory *only* contains the\ndesired RPMs.\n\nPlease note that this update is also available via Red Hat Network.  Many\npeople find this an easier way to apply updates.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.\n\nIf up2date fails to connect to Red Hat Network due to SSL Certificate \nErrors, you need to install a version of the up2date client with an updated \ncertificate.  The latest version of up2date is available from the Red Hat \nFTP site and may also be downloaded directly from the RHN website:\n\nhttps://rhn.redhat.com/help/latest-up2date.pxt",
          "product_ids": [
            "Red Hat Linux 8.0",
            "Red Hat Linux 9"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2003:320"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "security flaw"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Low"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated Apache packages that fix a minor security issue are now available\nfor Red Hat Enterprise Linux.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The Apache HTTP server is a powerful, full-featured, efficient, and\nfreely-available Web server.\n\nAn issue in the handling of regular expressions from configuration files\nwas discovered in releases of the Apache HTTP Server version 1.3 prior to\n1.3.29. To exploit this issue an attacker would need to have the ability\nto write to Apache configuration files such as .htaccess or httpd.conf. A\ncarefully-crafted configuration file can cause an exploitable buffer\noverflow and would allow the attacker to execute arbitrary code in the\ncontext of the server (in default configurations as the \u0027apache\u0027 user).\nThe Common Vulnerabilities and Exposures project (cve.mitre.org) has\nassigned the name CAN-2003-0542 to this issue.\n\nThis update also includes an alternative version of the httpd binary which\nsupports setting the MaxClients configuration directive to values above 256.\n\nAll users of the Apache HTTP Web Server are advised to upgrade to the\napplicable errata packages, which contain back-ported fixes correcting\nthe above security issue.\n\nNote that the instructions in the \"Solution\" section of this errata contain\nadditional steps required to complete the upgrade process.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2003:360",
        "url": "https://access.redhat.com/errata/RHSA-2003:360"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#low",
        "url": "https://access.redhat.com/security/updates/classification/#low"
      },
      {
        "category": "external",
        "summary": "http://www.apacheweek.com/features/security-13.html",
        "url": "http://www.apacheweek.com/features/security-13.html"
      },
      {
        "category": "external",
        "summary": "110328",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=110328"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2003/rhsa-2003_360.json"
      }
    ],
    "title": "Red Hat Security Advisory: apache security update",
    "tracking": {
      "current_release_date": "2024-11-14T10:02:55+00:00",
      "generator": {
        "date": "2024-11-14T10:02:55+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.0"
        }
      },
      "id": "RHSA-2003:360",
      "initial_release_date": "2003-12-10T16:52:00+00:00",
      "revision_history": [
        {
          "date": "2003-12-10T16:52:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2003-12-10T00:00:00+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-14T10:02:55+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
                "product": {
                  "name": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
                  "product_id": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:2.1::as"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Linux Advanced Workstation 2.1",
                "product": {
                  "name": "Red Hat Linux Advanced Workstation 2.1",
                  "product_id": "Red Hat Linux Advanced Workstation 2.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:2.1::aw"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ES version 2.1",
                "product": {
                  "name": "Red Hat Enterprise Linux ES version 2.1",
                  "product_id": "Red Hat Enterprise Linux ES version 2.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:2.1::es"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux WS version 2.1",
                "product": {
                  "name": "Red Hat Enterprise Linux WS version 2.1",
                  "product_id": "Red Hat Enterprise Linux WS version 2.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:2.1::ws"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2003-0542",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1617048"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple stack-based buffer overflows in (1) mod_alias and (2) mod_rewrite for Apache before 1.3.29 allow attackers to create configuration files to cause a denial of service (crash) or execute arbitrary code via a regular expression with more than 9 captures.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "Red Hat Enterprise Linux ES version 2.1",
          "Red Hat Enterprise Linux WS version 2.1",
          "Red Hat Linux Advanced Workstation 2.1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2003-0542"
        },
        {
          "category": "external",
          "summary": "RHBZ#1617048",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617048"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2003-0542",
          "url": "https://www.cve.org/CVERecord?id=CVE-2003-0542"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2003-0542",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2003-0542"
        }
      ],
      "release_date": "2003-10-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2003-12-10T16:52:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo update all RPMs for your particular architecture, run:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade.  Only those\nRPMs which are currently installed will be updated.  Those RPMs which are\nnot installed but included in the list will not be updated.  Note that you\ncan also use wildcards (*.rpm) if your current directory *only* contains the\ndesired RPMs.\n\nPlease note that this update is also available via Red Hat Network.  Many\npeople find this an easier way to apply updates.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.\n\nIf up2date fails to connect to Red Hat Network due to SSL\nCertificate Errors, you need to install a version of the\nup2date client with an updated certificate.  The latest version of\nup2date is available from the Red Hat FTP site and may also be\ndownloaded directly from the RHN website:\n\nhttps://rhn.redhat.com/help/latest-up2date.pxt\n\nAfter the errata packages are installed, restart the Web service by running\nthe following command as root:\n\n/sbin/service httpd restart",
          "product_ids": [
            "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
            "Red Hat Enterprise Linux ES version 2.1",
            "Red Hat Enterprise Linux WS version 2.1",
            "Red Hat Linux Advanced Workstation 2.1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2003:360"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "security flaw"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2003-0542"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-119"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2003-11-03T05:00:00Z",
    "severity": "HIGH"
  },
  "details": "Multiple stack-based buffer overflows in (1) mod_alias and (2) mod_rewrite for Apache before 1.3.29 allow attackers to create configuration files to cause a denial of service (crash) or execute arbitrary code via a regular expression with more than 9 captures.",
  "id": "GHSA-5cfw-vgxw-pqxm",
  "modified": "2022-05-03T03:09:43Z",
  "published": "2022-05-03T03:09:43Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2003-0542"
    },
    {
      "type": "WEB",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9458"
    },
    {
      "type": "WEB",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A864"
    },
    {
      "type": "WEB",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A863"
    },
    {
      "type": "WEB",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3799"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9@%3Ccvs.httpd.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e@%3Ccvs.httpd.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/re028d61fe612b0908595d658b9b39e74bca56f2a1ed3c5f06b5ab571@%3Ccvs.httpd.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/raa117ef183f0da9b3f46efbeaa66f7622bd68868a450cae4fd8ed594@%3Ccvs.httpd.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920@%3Ccvs.httpd.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142@%3Ccvs.httpd.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb@%3Ccvs.httpd.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/r7035b7c9091c4b665a3b7205364775410646f12125d48e74e395f2ce@%3Ccvs.httpd.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5@%3Ccvs.httpd.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6@%3Ccvs.httpd.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b@%3Ccvs.httpd.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc@%3Ccvs.httpd.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79@%3Ccvs.httpd.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac@%3Ccvs.httpd.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/13400"
    },
    {
      "type": "WEB",
      "url": "http://docs.info.apple.com/article.html?artnum=61798"
    },
    {
      "type": "WEB",
      "url": "http://httpd.apache.org/dist/httpd/Announcement2.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.apple.com/archives/security-announce/2004/Jan/msg00000.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.apple.com/mhonarc/security-announce/msg00045.html"
    },
    {
      "type": "WEB",
      "url": "http://marc.info/?l=bugtraq\u0026m=106761802305141\u0026w=2"
    },
    {
      "type": "WEB",
      "url": "http://marc.info/?l=bugtraq\u0026m=130497311408250\u0026w=2"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/10096"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/10098"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/10102"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/10112"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/10114"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/10153"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/10260"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/10264"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/10463"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/10580"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/10593"
    },
    {
      "type": "WEB",
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101444-1"
    },
    {
      "type": "WEB",
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101841-1"
    },
    {
      "type": "WEB",
      "url": "http://www.kb.cert.org/vuls/id/434566"
    },
    {
      "type": "WEB",
      "url": "http://www.kb.cert.org/vuls/id/549142"
    },
    {
      "type": "WEB",
      "url": "http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2003:103"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2003-320.html"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2003-360.html"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2003-405.html"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2004-015.html"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2005-816.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/advisories/6079"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/342674"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/8911"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/9504"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

{
  "GSD": {
    "alias": "CVE-2003-0542",
    "description": "Multiple stack-based buffer overflows in (1) mod_alias and (2) mod_rewrite for Apache before 1.3.29 allow attackers to create configuration files to cause a denial of service (crash) or execute arbitrary code via a regular expression with more than 9 captures.",
    "id": "GSD-2003-0542",
    "references": [
      "https://www.suse.com/security/cve/CVE-2003-0542.html",
      "https://access.redhat.com/errata/RHSA-2005:816",
      "https://access.redhat.com/errata/RHSA-2004:139",
      "https://access.redhat.com/errata/RHSA-2004:015",
      "https://access.redhat.com/errata/RHSA-2003:405",
      "https://access.redhat.com/errata/RHSA-2003:360",
      "https://access.redhat.com/errata/RHSA-2003:320"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2003-0542"
      ],
      "details": "Multiple stack-based buffer overflows in (1) mod_alias and (2) mod_rewrite for Apache before 1.3.29 allow attackers to create configuration files to cause a denial of service (crash) or execute arbitrary code via a regular expression with more than 9 captures.",
      "id": "GSD-2003-0542",
      "modified": "2023-12-13T01:22:13.573911Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2003-0542",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Multiple stack-based buffer overflows in (1) mod_alias and (2) mod_rewrite for Apache before 1.3.29 allow attackers to create configuration files to cause a denial of service (crash) or execute arbitrary code via a regular expression with more than 9 captures."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "20040202-01-U",
            "refsource": "SGI",
            "url": "ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc"
          },
          {
            "name": "RHSA-2004:015",
            "refsource": "REDHAT",
            "url": "http://www.redhat.com/support/errata/RHSA-2004-015.html"
          },
          {
            "name": "10112",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/10112"
          },
          {
            "name": "VU#434566",
            "refsource": "CERT-VN",
            "url": "http://www.kb.cert.org/vuls/id/434566"
          },
          {
            "name": "10593",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/10593"
          },
          {
            "name": "MDKSA-2003:103",
            "refsource": "MANDRAKE",
            "url": "http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2003:103"
          },
          {
            "name": "RHSA-2003:360",
            "refsource": "REDHAT",
            "url": "http://www.redhat.com/support/errata/RHSA-2003-360.html"
          },
          {
            "name": "SSRT090208",
            "refsource": "HP",
            "url": "http://marc.info/?l=bugtraq\u0026m=130497311408250\u0026w=2"
          },
          {
            "name": "http://httpd.apache.org/dist/httpd/Announcement2.html",
            "refsource": "CONFIRM",
            "url": "http://httpd.apache.org/dist/httpd/Announcement2.html"
          },
          {
            "name": "http://lists.apple.com/mhonarc/security-announce/msg00045.html",
            "refsource": "CONFIRM",
            "url": "http://lists.apple.com/mhonarc/security-announce/msg00045.html"
          },
          {
            "name": "APPLE-SA-2004-01-26",
            "refsource": "APPLE",
            "url": "http://lists.apple.com/archives/security-announce/2004/Jan/msg00000.html"
          },
          {
            "name": "SCOSA-2004.6",
            "refsource": "SCO",
            "url": "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.6/SCOSA-2004.6.txt"
          },
          {
            "name": "RHSA-2003:405",
            "refsource": "REDHAT",
            "url": "http://www.redhat.com/support/errata/RHSA-2003-405.html"
          },
          {
            "name": "oval:org.mitre.oval:def:3799",
            "refsource": "OVAL",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3799"
          },
          {
            "name": "9504",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/9504"
          },
          {
            "name": "20031028 [OpenPKG-SA-2003.046] OpenPKG Security Advisory (apache)",
            "refsource": "BUGTRAQ",
            "url": "http://www.securityfocus.com/archive/1/342674"
          },
          {
            "name": "20031203-01-U",
            "refsource": "SGI",
            "url": "ftp://patches.sgi.com/support/free/security/advisories/20031203-01-U.asc"
          },
          {
            "name": "oval:org.mitre.oval:def:9458",
            "refsource": "OVAL",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9458"
          },
          {
            "name": "10102",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/10102"
          },
          {
            "name": "apache-modalias-modrewrite-bo(13400)",
            "refsource": "XF",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/13400"
          },
          {
            "name": "HPSBUX0311-301",
            "refsource": "HP",
            "url": "http://www.securityfocus.com/advisories/6079"
          },
          {
            "name": "RHSA-2005:816",
            "refsource": "REDHAT",
            "url": "http://www.redhat.com/support/errata/RHSA-2005-816.html"
          },
          {
            "name": "10153",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/10153"
          },
          {
            "name": "10098",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/10098"
          },
          {
            "name": "HPSBOV02683",
            "refsource": "HP",
            "url": "http://marc.info/?l=bugtraq\u0026m=130497311408250\u0026w=2"
          },
          {
            "name": "10264",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/10264"
          },
          {
            "name": "oval:org.mitre.oval:def:864",
            "refsource": "OVAL",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A864"
          },
          {
            "name": "10580",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/10580"
          },
          {
            "name": "101841",
            "refsource": "SUNALERT",
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101841-1"
          },
          {
            "name": "RHSA-2003:320",
            "refsource": "REDHAT",
            "url": "http://www.redhat.com/support/errata/RHSA-2003-320.html"
          },
          {
            "name": "101444",
            "refsource": "SUNALERT",
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101444-1"
          },
          {
            "name": "10260",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/10260"
          },
          {
            "name": "10463",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/10463"
          },
          {
            "name": "20031031 GLSA:  apache (200310-04)",
            "refsource": "BUGTRAQ",
            "url": "http://marc.info/?l=bugtraq\u0026m=106761802305141\u0026w=2"
          },
          {
            "name": "VU#549142",
            "refsource": "CERT-VN",
            "url": "http://www.kb.cert.org/vuls/id/549142"
          },
          {
            "name": "http://docs.info.apple.com/article.html?artnum=61798",
            "refsource": "CONFIRM",
            "url": "http://docs.info.apple.com/article.html?artnum=61798"
          },
          {
            "name": "10096",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/10096"
          },
          {
            "name": "10114",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/10114"
          },
          {
            "name": "8911",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/8911"
          },
          {
            "name": "oval:org.mitre.oval:def:863",
            "refsource": "OVAL",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A863"
          },
          {
            "name": "[httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "refsource": "MLIST",
            "url": "https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac@%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20190815 svn commit: r1048743 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "refsource": "MLIST",
            "url": "https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79@%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20200401 svn commit: r1058586 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "refsource": "MLIST",
            "url": "https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc@%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20200401 svn commit: r1058587 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "refsource": "MLIST",
            "url": "https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb@%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
            "refsource": "MLIST",
            "url": "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9@%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210330 svn commit: r1073139 [2/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
            "refsource": "MLIST",
            "url": "https://lists.apache.org/thread.html/re028d61fe612b0908595d658b9b39e74bca56f2a1ed3c5f06b5ab571@%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210330 svn commit: r1073140 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "refsource": "MLIST",
            "url": "https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5@%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210330 svn commit: r1888194 [2/13] - /httpd/site/trunk/content/security/json/",
            "refsource": "MLIST",
            "url": "https://lists.apache.org/thread.html/r7035b7c9091c4b665a3b7205364775410646f12125d48e74e395f2ce@%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210330 svn commit: r1073140 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "refsource": "MLIST",
            "url": "https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b@%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210330 svn commit: r1073143 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/",
            "refsource": "MLIST",
            "url": "https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142@%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210330 svn commit: r1073149 [3/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
            "refsource": "MLIST",
            "url": "https://lists.apache.org/thread.html/raa117ef183f0da9b3f46efbeaa66f7622bd68868a450cae4fd8ed594@%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
            "refsource": "MLIST",
            "url": "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920@%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210606 svn commit: r1075470 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "refsource": "MLIST",
            "url": "https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e@%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210606 svn commit: r1075470 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "refsource": "MLIST",
            "url": "https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6@%3Ccvs.httpd.apache.org%3E"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:apache:http_server:1.3.12:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:http_server:1.3.14:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:http_server:1.3.24:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:http_server:1.3.25:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:http_server:1.3.26:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:http_server:2.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:http_server:1.3.17:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:http_server:1.3.18:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:http_server:1.3.27:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:http_server:1.3.28:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:http_server:2.0.32:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:http_server:2.0.35:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:http_server:2.0.42:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:http_server:2.0.43:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:http_server:1.3.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:http_server:1.3.11:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:http_server:1.3.22:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:http_server:1.3.23:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:http_server:1.3.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:http_server:1.3.9:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:http_server:2.0.38:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:http_server:2.0.39:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:http_server:2.0.46:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:http_server:2.0.47:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:http_server:2.0.28:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:http_server:2.0.40:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:http_server:2.0.41:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:http_server:1.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:http_server:1.3.19:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:http_server:1.3.20:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:http_server:1.3.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:http_server:1.3.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:http_server:2.0.36:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:http_server:2.0.37:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:http_server:2.0.44:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:http_server:2.0.45:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2003-0542"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Multiple stack-based buffer overflows in (1) mod_alias and (2) mod_rewrite for Apache before 1.3.29 allow attackers to create configuration files to cause a denial of service (crash) or execute arbitrary code via a regular expression with more than 9 captures."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-119"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "8911",
              "refsource": "BID",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "http://www.securityfocus.com/bid/8911"
            },
            {
              "name": "RHSA-2004:015",
              "refsource": "REDHAT",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "http://www.redhat.com/support/errata/RHSA-2004-015.html"
            },
            {
              "name": "http://httpd.apache.org/dist/httpd/Announcement2.html",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://httpd.apache.org/dist/httpd/Announcement2.html"
            },
            {
              "name": "20031028 [OpenPKG-SA-2003.046] OpenPKG Security Advisory (apache)",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://www.securityfocus.com/archive/1/342674"
            },
            {
              "name": "HPSBUX0311-301",
              "refsource": "HP",
              "tags": [],
              "url": "http://www.securityfocus.com/advisories/6079"
            },
            {
              "name": "MDKSA-2003:103",
              "refsource": "MANDRAKE",
              "tags": [],
              "url": "http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2003:103"
            },
            {
              "name": "RHSA-2003:320",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://www.redhat.com/support/errata/RHSA-2003-320.html"
            },
            {
              "name": "RHSA-2003:360",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://www.redhat.com/support/errata/RHSA-2003-360.html"
            },
            {
              "name": "RHSA-2003:405",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://www.redhat.com/support/errata/RHSA-2003-405.html"
            },
            {
              "name": "SCOSA-2004.6",
              "refsource": "SCO",
              "tags": [],
              "url": "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.6/SCOSA-2004.6.txt"
            },
            {
              "name": "20031203-01-U",
              "refsource": "SGI",
              "tags": [],
              "url": "ftp://patches.sgi.com/support/free/security/advisories/20031203-01-U.asc"
            },
            {
              "name": "http://lists.apple.com/mhonarc/security-announce/msg00045.html",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://lists.apple.com/mhonarc/security-announce/msg00045.html"
            },
            {
              "name": "VU#434566",
              "refsource": "CERT-VN",
              "tags": [
                "US Government Resource"
              ],
              "url": "http://www.kb.cert.org/vuls/id/434566"
            },
            {
              "name": "VU#549142",
              "refsource": "CERT-VN",
              "tags": [
                "US Government Resource"
              ],
              "url": "http://www.kb.cert.org/vuls/id/549142"
            },
            {
              "name": "10096",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/10096"
            },
            {
              "name": "10098",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/10098"
            },
            {
              "name": "10102",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/10102"
            },
            {
              "name": "10112",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/10112"
            },
            {
              "name": "10114",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/10114"
            },
            {
              "name": "10153",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/10153"
            },
            {
              "name": "10260",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/10260"
            },
            {
              "name": "10264",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/10264"
            },
            {
              "name": "10463",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/10463"
            },
            {
              "name": "9504",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/9504"
            },
            {
              "name": "RHSA-2005:816",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://www.redhat.com/support/errata/RHSA-2005-816.html"
            },
            {
              "name": "101444",
              "refsource": "SUNALERT",
              "tags": [],
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101444-1"
            },
            {
              "name": "101841",
              "refsource": "SUNALERT",
              "tags": [],
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101841-1"
            },
            {
              "name": "APPLE-SA-2004-01-26",
              "refsource": "APPLE",
              "tags": [],
              "url": "http://lists.apple.com/archives/security-announce/2004/Jan/msg00000.html"
            },
            {
              "name": "20040202-01-U",
              "refsource": "SGI",
              "tags": [],
              "url": "ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc"
            },
            {
              "name": "10580",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/10580"
            },
            {
              "name": "10593",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/10593"
            },
            {
              "name": "SSRT090208",
              "refsource": "HP",
              "tags": [],
              "url": "http://marc.info/?l=bugtraq\u0026m=130497311408250\u0026w=2"
            },
            {
              "name": "http://docs.info.apple.com/article.html?artnum=61798",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://docs.info.apple.com/article.html?artnum=61798"
            },
            {
              "name": "20031031 GLSA:  apache (200310-04)",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://marc.info/?l=bugtraq\u0026m=106761802305141\u0026w=2"
            },
            {
              "name": "apache-modalias-modrewrite-bo(13400)",
              "refsource": "XF",
              "tags": [],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/13400"
            },
            {
              "name": "oval:org.mitre.oval:def:9458",
              "refsource": "OVAL",
              "tags": [],
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9458"
            },
            {
              "name": "oval:org.mitre.oval:def:864",
              "refsource": "OVAL",
              "tags": [],
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A864"
            },
            {
              "name": "oval:org.mitre.oval:def:863",
              "refsource": "OVAL",
              "tags": [],
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A863"
            },
            {
              "name": "oval:org.mitre.oval:def:3799",
              "refsource": "OVAL",
              "tags": [],
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3799"
            },
            {
              "name": "[httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
              "refsource": "MLIST",
              "tags": [],
              "url": "https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-cvs] 20190815 svn commit: r1048743 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
              "refsource": "MLIST",
              "tags": [],
              "url": "https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-cvs] 20200401 svn commit: r1058586 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
              "refsource": "MLIST",
              "tags": [],
              "url": "https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-cvs] 20200401 svn commit: r1058587 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
              "refsource": "MLIST",
              "tags": [],
              "url": "https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
              "refsource": "MLIST",
              "tags": [],
              "url": "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-cvs] 20210330 svn commit: r1073140 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
              "refsource": "MLIST",
              "tags": [],
              "url": "https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-cvs] 20210330 svn commit: r1888194 [2/13] - /httpd/site/trunk/content/security/json/",
              "refsource": "MLIST",
              "tags": [],
              "url": "https://lists.apache.org/thread.html/r7035b7c9091c4b665a3b7205364775410646f12125d48e74e395f2ce@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-cvs] 20210330 svn commit: r1073139 [2/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
              "refsource": "MLIST",
              "tags": [],
              "url": "https://lists.apache.org/thread.html/re028d61fe612b0908595d658b9b39e74bca56f2a1ed3c5f06b5ab571@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-cvs] 20210330 svn commit: r1073140 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
              "refsource": "MLIST",
              "tags": [],
              "url": "https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-cvs] 20210330 svn commit: r1073149 [3/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
              "refsource": "MLIST",
              "tags": [],
              "url": "https://lists.apache.org/thread.html/raa117ef183f0da9b3f46efbeaa66f7622bd68868a450cae4fd8ed594@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-cvs] 20210606 svn commit: r1075470 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
              "refsource": "MLIST",
              "tags": [],
              "url": "https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-cvs] 20210606 svn commit: r1075470 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
              "refsource": "MLIST",
              "tags": [],
              "url": "https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-cvs] 20210330 svn commit: r1073143 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/",
              "refsource": "MLIST",
              "tags": [],
              "url": "https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
              "refsource": "MLIST",
              "tags": [],
              "url": "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920@%3Ccvs.httpd.apache.org%3E"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.2,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 10.0,
          "obtainAllPrivilege": true,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2021-06-06T11:15Z",
      "publishedDate": "2003-11-03T05:00Z"
    }
  }
}