mod_access in Apache 1.3 before 1.3.30, when running big-endian 64-bit platforms, does not properly parse Allow/Deny rules using IP addresses without a netmask, which could allow remote attackers to bypass intended access restrictions.
CVSS Details
- CVSS 3.1 Base Score: 7.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apache Httpd | — | Upgrade to the latest version of Apache HTTPD | Apr 12, 2012 | Mar 29, 2004 |
| Freebsd | — | Upgrade ru-apacheUpgrade ru-apache+mod_sslUpgrade apacheUpgrade apache+sslUpgrade apache+mod_ssl | Dec 10, 2025 | Mar 8, 2004 |
| Gentoo Linux | — | Upgrade www-servers/apache. | Oct 30, 2017 | Mar 29, 2004 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub