BID:37966

Apache 1.3 mod_proxy HTTP Chunked Encoding Integer Overflow Vulnerability

Info

Apache 1.3 mod_proxy HTTP Chunked Encoding Integer Overflow Vulnerability

Bugtraq ID:	37966
Class:	Boundary Condition Error
CVE:	CVE-2010-0010
Remote:	Yes
Local:	No
Published:	Jan 27 2010 12:00AM
Updated:	May 09 2011 07:53PM
Credit:	Adam Zabrocki
Vulnerable:	S.u.S.E. openSUSE 11.2 HP OpenVMS Secure Web Server 1.2 HP OpenVMS Secure Web Server 1.1 -1 HP OpenVMS Secure Web Server 2.1-1 Apache Software Foundation Apache 1.3.41 Apache Software Foundation Apache 1.3.39 Apache Software Foundation Apache 1.3.37 Apache Software Foundation Apache 1.3.36 Apache Software Foundation Apache 1.3.35 -dev Apache Software Foundation Apache 1.3.34 Apache Software Foundation Apache 1.3.33 + Apple Mac OS X 10.3.6 + Apple Mac OS X 10.2.8 + Apple Mac OS X Server 10.3.6 + Apple Mac OS X Server 10.2.8 + Debian Linux 3.1 sparc + Debian Linux 3.1 s/390 + Debian Linux 3.1 ppc + Debian Linux 3.1 mipsel + Debian Linux 3.1 mips + Debian Linux 3.1 m68k + Debian Linux 3.1 ia-64 + Debian Linux 3.1 ia-32 + Debian Linux 3.1 hppa + Debian Linux 3.1 arm + Debian Linux 3.1 amd64 + Debian Linux 3.1 alpha + Debian Linux 3.1 Apache Software Foundation Apache 1.3.32 + Gentoo Linux 1.4 + Gentoo Linux Apache Software Foundation Apache 1.3.31 + OpenPKG OpenPKG Current Apache Software Foundation Apache 1.3.29 + Apple Mac OS X 10.3.5 + Apple Mac OS X 10.2.7 + Apple Mac OS X Server 10.3.5 + Apple Mac OS X Server 10.2.7 + MandrakeSoft Linux Mandrake 10.0 AMD64 + MandrakeSoft Linux Mandrake 10.0 + OpenPKG OpenPKG 2.0 Apache Software Foundation Apache 1.3.28 + Conectiva Linux 8.0 + MandrakeSoft Linux Mandrake 9.2 amd64 + MandrakeSoft Linux Mandrake 9.2 + OpenBSD OpenBSD 3.4 + OpenPKG OpenPKG 1.3 Apache Software Foundation Apache 1.3.27 + HP HP-UX (VVOS) 11.0 4 + HP VirtualVault 4.6 + HP VirtualVault 4.5 + HP Webproxy 2.0 + Immunix Immunix OS 7+ + MandrakeSoft Linux Mandrake 9.1 ppc + MandrakeSoft Linux Mandrake 9.1 + OpenBSD OpenBSD 3.3 + OpenPKG OpenPKG Current + RedHat Enterprise Linux AS 2.1 IA64 + RedHat Enterprise Linux AS 2.1 + RedHat Enterprise Linux ES 2.1 IA64 + RedHat Enterprise Linux ES 2.1 + RedHat Enterprise Linux WS 2.1 IA64 + RedHat Enterprise Linux WS 2.1 + RedHat Linux Advanced Work Station 2.1 + SGI IRIX 6.5.19 Apache Software Foundation Apache 1.3.26 + Conectiva Linux 8.0 + Conectiva Linux 7.0 + Conectiva Linux 6.0 + Debian Linux 3.0 sparc + Debian Linux 3.0 s/390 + Debian Linux 3.0 ppc + Debian Linux 3.0 mipsel + Debian Linux 3.0 mips + Debian Linux 3.0 m68k + Debian Linux 3.0 ia-64 + Debian Linux 3.0 ia-32 + Debian Linux 3.0 hppa + Debian Linux 3.0 arm + Debian Linux 3.0 alpha + MandrakeSoft Corporate Server 2.1 x86_64 + MandrakeSoft Corporate Server 2.1 + MandrakeSoft Linux Mandrake 9.0 + OpenPKG OpenPKG 1.1 + Trustix Secure Linux 1.5 + Trustix Secure Linux 1.2 + Trustix Secure Linux 1.1 Apache Software Foundation Apache 1.3.25 Apache Software Foundation Apache 1.3.24 - Microsoft Windows 2000 Advanced Server SP2 - Microsoft Windows 2000 Advanced Server SP2 - Microsoft Windows 2000 Advanced Server SP1 - Microsoft Windows 2000 Advanced Server SP1 - Microsoft Windows 2000 Advanced Server - Microsoft Windows 2000 Advanced Server - Microsoft Windows 2000 Datacenter Server SP2 - Microsoft Windows 2000 Datacenter Server SP2 - Microsoft Windows 2000 Datacenter Server SP1 - Microsoft Windows 2000 Datacenter Server SP1 - Microsoft Windows 2000 Datacenter Server - Microsoft Windows 2000 Datacenter Server - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Server SP2 - Microsoft Windows 2000 Server SP2 - Microsoft Windows 2000 Server SP1 - Microsoft Windows 2000 Server SP1 - Microsoft Windows 2000 Server - Microsoft Windows 2000 Server - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT Enterprise Server 4.0 SP6a - Microsoft Windows NT Enterprise Server 4.0 SP6a - Microsoft Windows NT Enterprise Server 4.0 SP6 - Microsoft Windows NT Enterprise Server 4.0 SP6 - Microsoft Windows NT Enterprise Server 4.0 SP5 - Microsoft Windows NT Enterprise Server 4.0 SP5 - Microsoft Windows NT Enterprise Server 4.0 SP4 - Microsoft Windows NT Enterprise Server 4.0 SP4 - Microsoft Windows NT Enterprise Server 4.0 SP3 - Microsoft Windows NT Enterprise Server 4.0 SP3 - Microsoft Windows NT Enterprise Server 4.0 SP2 - Microsoft Windows NT Enterprise Server 4.0 SP2 - Microsoft Windows NT Enterprise Server 4.0 SP1 - Microsoft Windows NT Enterprise Server 4.0 SP1 - Microsoft Windows NT Enterprise Server 4.0 - Microsoft Windows NT Enterprise Server 4.0 - Microsoft Windows NT Server 4.0 SP6a - Microsoft Windows NT Server 4.0 SP6a - Microsoft Windows NT Server 4.0 SP6 - Microsoft Windows NT Server 4.0 SP6 - Microsoft Windows NT Server 4.0 SP5 - Microsoft Windows NT Server 4.0 SP5 - Microsoft Windows NT Server 4.0 SP4 - Microsoft Windows NT Server 4.0 SP4 - Microsoft Windows NT Server 4.0 SP3 - Microsoft Windows NT Server 4.0 SP3 - Microsoft Windows NT Server 4.0 SP2 - Microsoft Windows NT Server 4.0 SP2 - Microsoft Windows NT Server 4.0 SP1 - Microsoft Windows NT Server 4.0 SP1 - Microsoft Windows NT Server 4.0 - Microsoft Windows NT Server 4.0 - Microsoft Windows NT Terminal Server 4.0 SP6a - Microsoft Windows NT Terminal Server 4.0 SP6 - Microsoft Windows NT Terminal Server 4.0 SP6 - Microsoft Windows NT Terminal Server 4.0 SP5 - Microsoft Windows NT Terminal Server 4.0 SP5 - Microsoft Windows NT Terminal Server 4.0 SP4 - Microsoft Windows NT Terminal Server 4.0 SP4 - Microsoft Windows NT Terminal Server 4.0 SP3 - Microsoft Windows NT Terminal Server 4.0 SP3 - Microsoft Windows NT Terminal Server 4.0 SP2 - Microsoft Windows NT Terminal Server 4.0 SP2 - Microsoft Windows NT Terminal Server 4.0 SP1 - Microsoft Windows NT Terminal Server 4.0 SP1 - Microsoft Windows NT Terminal Server 4.0 alpha - Microsoft Windows NT Terminal Server 4.0 - Microsoft Windows NT Terminal Server 4.0 - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows XP Home - Microsoft Windows XP Home - Microsoft Windows XP Professional - Microsoft Windows XP Professional Apache Software Foundation Apache 1.3.23 - IBM AIX 4.3 + MandrakeSoft Linux Mandrake 8.2 ppc + MandrakeSoft Linux Mandrake 8.2 + RedHat Linux 7.3 i386 + RedHat Linux 7.3 + S.u.S.E. Linux 8.0 i386 + S.u.S.E. Linux 8.0 + Trustix Secure Linux 1.5 + Trustix Secure Linux 1.2 + Trustix Secure Linux 1.1 Apache Software Foundation Apache 1.3.22 + Caldera OpenLinux Server 3.1.1 + Caldera OpenLinux Server 3.1 + Caldera OpenLinux Workstation 3.1.1 + Caldera OpenLinux Workstation 3.1 + Conectiva Linux 8.0 + Conectiva Linux 7.0 + Conectiva Linux 6.0 + MandrakeSoft Corporate Server 1.0.1 + MandrakeSoft Linux Mandrake 8.1 ia64 + MandrakeSoft Linux Mandrake 8.1 + MandrakeSoft Linux Mandrake 8.0 ppc + MandrakeSoft Linux Mandrake 8.0 + MandrakeSoft Linux Mandrake 7.2 + OpenPKG OpenPKG 1.0 + RedHat Linux 7.2 ia64 + RedHat Linux 7.2 i386 + RedHat Linux 7.1 ia64 + RedHat Linux 7.1 i386 + RedHat Linux 7.1 alpha + RedHat Linux 7.0 i386 + RedHat Linux 7.0 alpha + RedHat Linux 6.2 sparc + RedHat Linux 6.2 i386 + RedHat Linux 6.2 alpha Apache Software Foundation Apache 1.3.20 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 Apache Software Foundation Apache 1.3.19 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 Apache Software Foundation Apache 1.3.18 + Apache Software Foundation Apache 1.1 + Apache Software Foundation Apache 1.1 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 Apache Software Foundation Apache 1.3.17 + MandrakeSoft Corporate Server 1.0.1 + MandrakeSoft Linux Mandrake 8.0 ppc + MandrakeSoft Linux Mandrake 8.0 + OpenBSD OpenBSD 2.8 + S.u.S.E. Linux 7.1 Apache Software Foundation Apache 1.3.16 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 Apache Software Foundation Apache 1.3.15 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 Apache Software Foundation Apache 1.3.14 Mac - Apple Mac OS X 10.0.3 - Apple Mac OS X 10.0.2 - Apple Mac OS X 10.0.2 - Apple Mac OS X 10.0.1 - Apple Mac OS X 10.0.1 - Apple Mac OS X 10.0 - Apple Mac OS X 10.0 Apache Software Foundation Apache 1.3.14 + EnGarde Secure Linux 1.0.1 + MandrakeSoft Linux Mandrake 7.2 + MandrakeSoft Linux Mandrake 7.1 - MandrakeSoft Single Network Firewall 7.2 + SGI IRIX 6.5.11 + SGI IRIX 6.5.10 + SGI IRIX 6.5.9 + SGI IRIX 6.5.8 + SGI IRIX 6.5.7 + SGI IRIX 6.5.6 + SGI IRIX 6.5.5 + SGI IRIX 6.5.4 + SGI IRIX 6.5.3 + SGI IRIX 6.5.2 + SGI IRIX 6.5.1 + SGI IRIX 6.5 Apache Software Foundation Apache 1.3.13 Apache Software Foundation Apache 1.3.12 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 Apache Software Foundation Apache 1.3.11 Apache Software Foundation Apache 1.3.9 Apache Software Foundation Apache 1.3.7 -dev Apache Software Foundation Apache 1.3.6 Apache Software Foundation Apache 1.3.4 + BSDI BSD/OS 4.0 Apache Software Foundation Apache 1.3.3 + RedHat Linux 5.2 sparc + RedHat Linux 5.2 i386 + RedHat Linux 5.2 alpha Apache Software Foundation Apache 1.3.1 Apache Software Foundation Apache 1.3 + Apple Mac OS X 10.3.2 + Apple Mac OS X 10.3.1 + Apple Mac OS X 10.3 + Apple Mac OS X 10.2.8 + Apple Mac OS X 10.2.7 + Apple Mac OS X 10.2.6 + Apple Mac OS X 10.2.5 + Apple Mac OS X 10.2.4 + Apple Mac OS X 10.2.3 + Apple Mac OS X 10.2.2 + Apple Mac OS X 10.2.1 + Apple Mac OS X 10.2 + Apple Mac OS X 10.1.5 + Apple Mac OS X 10.1.4 + Apple Mac OS X 10.1.3 + Apple Mac OS X 10.1.2 + Apple Mac OS X 10.1.1 + Apple Mac OS X 10.1 + Apple Mac OS X Server 10.3.2 + Apple Mac OS X Server 10.3.1 + Apple Mac OS X Server 10.3 + Apple Mac OS X Server 10.2.8 + Apple Mac OS X Server 10.2.7 + Apple Mac OS X Server 10.2.6 + Apple Mac OS X Server 10.2.5 + Apple Mac OS X Server 10.2.4 + Apple Mac OS X Server 10.2.3 + Apple Mac OS X Server 10.2.2 + Apple Mac OS X Server 10.2.1 + Apple Mac OS X Server 10.2 + Apple Mac OS X Server 10.1.5 + Apple Mac OS X Server 10.1.4 + Apple Mac OS X Server 10.1.3 + Apple Mac OS X Server 10.1.2 + Apple Mac OS X Server 10.1.1 + Apple Mac OS X Server 10.1 - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 Apache Software Foundation Apache 1.3.40-dev Apache Software Foundation Apache 1.3.35

Not Vulnerable:	HP OpenVMS Secure Web Server 2.2 Apache Software Foundation Apache 1.3.42

Discussion

Apache 1.3 mod_proxy HTTP Chunked Encoding Integer Overflow Vulnerability

Apache is prone to a remote integer-overflow vulnerability.

An attacker can exploit this issue to execute arbitrary code. Successful exploits will compromise affected computers. Failed exploit attempts will result in a denial-of-service condition.

Note that this issue affects platforms on which 'sizeof(int)' is less than 'sizeof(long)'. In particular, this occurs on some 64-bit architectures.

Versions prior to Apache 1.3.42 are vulnerable.

Exploit / POC

Apache 1.3 mod_proxy HTTP Chunked Encoding Integer Overflow Vulnerability

The following proof of concept is available:

/data/vulnerabilities/exploits/37966.c

Solution / Fix

Apache 1.3 mod_proxy HTTP Chunked Encoding Integer Overflow Vulnerability

Solution:
Updates are available. Please see the references for more information.

Apache Software Foundation Apache 1.3.35

Apache Software Foundation apache_1.3.42.tar.gz
http://httpd.apache.org/dev/dist/apache_1.3.42.tar.gz

Apache Software Foundation Apache 1.3.40-dev

Apache Software Foundation apache_1.3.42.tar.gz
http://httpd.apache.org/dev/dist/apache_1.3.42.tar.gz

Apache Software Foundation Apache 1.3

Apache Software Foundation apache_1.3.42.tar.gz
http://httpd.apache.org/dev/dist/apache_1.3.42.tar.gz

Apache Software Foundation Apache 1.3.1

Apache Software Foundation apache_1.3.42.tar.gz
http://httpd.apache.org/dev/dist/apache_1.3.42.tar.gz

Apache Software Foundation Apache 1.3.11

Apache Software Foundation apache_1.3.42.tar.gz
http://httpd.apache.org/dev/dist/apache_1.3.42.tar.gz

Apache Software Foundation Apache 1.3.12

Apache Software Foundation apache_1.3.42.tar.gz
http://httpd.apache.org/dev/dist/apache_1.3.42.tar.gz

Apache Software Foundation Apache 1.3.13

Apache Software Foundation apache_1.3.42.tar.gz
http://httpd.apache.org/dev/dist/apache_1.3.42.tar.gz

Apache Software Foundation Apache 1.3.14

Apache Software Foundation apache_1.3.42.tar.gz
http://httpd.apache.org/dev/dist/apache_1.3.42.tar.gz

Apache Software Foundation Apache 1.3.14 Mac

Apache Software Foundation apache_1.3.42.tar.gz
http://httpd.apache.org/dev/dist/apache_1.3.42.tar.gz

Apache Software Foundation Apache 1.3.15

Apache Software Foundation apache_1.3.42.tar.gz
http://httpd.apache.org/dev/dist/apache_1.3.42.tar.gz

Apache Software Foundation Apache 1.3.16

Apache Software Foundation apache_1.3.42.tar.gz
http://httpd.apache.org/dev/dist/apache_1.3.42.tar.gz

Apache Software Foundation Apache 1.3.17

Apache Software Foundation apache_1.3.42.tar.gz
http://httpd.apache.org/dev/dist/apache_1.3.42.tar.gz

Apache Software Foundation Apache 1.3.18

Apache Software Foundation apache_1.3.42.tar.gz
http://httpd.apache.org/dev/dist/apache_1.3.42.tar.gz

Apache Software Foundation Apache 1.3.19

Apache Software Foundation apache_1.3.42.tar.gz
http://httpd.apache.org/dev/dist/apache_1.3.42.tar.gz

Apache Software Foundation Apache 1.3.20

Apache Software Foundation apache_1.3.42.tar.gz
http://httpd.apache.org/dev/dist/apache_1.3.42.tar.gz

Apache Software Foundation Apache 1.3.22

Apache Software Foundation apache_1.3.42.tar.gz
http://httpd.apache.org/dev/dist/apache_1.3.42.tar.gz

Apache Software Foundation Apache 1.3.23

Apache Software Foundation apache_1.3.42.tar.gz
http://httpd.apache.org/dev/dist/apache_1.3.42.tar.gz

Apache Software Foundation Apache 1.3.24

Apache Software Foundation apache_1.3.42.tar.gz
http://httpd.apache.org/dev/dist/apache_1.3.42.tar.gz

Apache Software Foundation Apache 1.3.25

Apache Software Foundation apache_1.3.42.tar.gz
http://httpd.apache.org/dev/dist/apache_1.3.42.tar.gz

Apache Software Foundation Apache 1.3.26

Apache Software Foundation apache_1.3.42.tar.gz
http://httpd.apache.org/dev/dist/apache_1.3.42.tar.gz

Apache Software Foundation Apache 1.3.27

Apache Software Foundation apache_1.3.42.tar.gz
http://httpd.apache.org/dev/dist/apache_1.3.42.tar.gz

Apache Software Foundation Apache 1.3.28

Apache Software Foundation apache_1.3.42.tar.gz
http://httpd.apache.org/dev/dist/apache_1.3.42.tar.gz

Apache Software Foundation Apache 1.3.29

Apache Software Foundation apache_1.3.42.tar.gz
http://httpd.apache.org/dev/dist/apache_1.3.42.tar.gz

Apache Software Foundation Apache 1.3.3

Apache Software Foundation apache_1.3.42.tar.gz
http://httpd.apache.org/dev/dist/apache_1.3.42.tar.gz

Apache Software Foundation Apache 1.3.31

Apache Software Foundation apache_1.3.42.tar.gz
http://httpd.apache.org/dev/dist/apache_1.3.42.tar.gz

Apache Software Foundation Apache 1.3.32

Apache Software Foundation apache_1.3.42.tar.gz
http://httpd.apache.org/dev/dist/apache_1.3.42.tar.gz

Apache Software Foundation Apache 1.3.33

Apache Software Foundation apache_1.3.42.tar.gz
http://httpd.apache.org/dev/dist/apache_1.3.42.tar.gz

Apache Software Foundation Apache 1.3.34

Apache Software Foundation apache_1.3.42.tar.gz
http://httpd.apache.org/dev/dist/apache_1.3.42.tar.gz

Apache Software Foundation Apache 1.3.35 -dev

Apache Software Foundation apache_1.3.42.tar.gz
http://httpd.apache.org/dev/dist/apache_1.3.42.tar.gz

Apache Software Foundation Apache 1.3.36

Apache Software Foundation apache_1.3.42.tar.gz
http://httpd.apache.org/dev/dist/apache_1.3.42.tar.gz

Apache Software Foundation Apache 1.3.37

Apache Software Foundation apache_1.3.42.tar.gz
http://httpd.apache.org/dev/dist/apache_1.3.42.tar.gz

Apache Software Foundation Apache 1.3.39

Apache Software Foundation apache_1.3.42.tar.gz
http://httpd.apache.org/dev/dist/apache_1.3.42.tar.gz

Apache Software Foundation Apache 1.3.4

Apache Software Foundation apache_1.3.42.tar.gz
http://httpd.apache.org/dev/dist/apache_1.3.42.tar.gz

Apache Software Foundation Apache 1.3.41

Apache Software Foundation apache_1.3.42.tar.gz
http://httpd.apache.org/dev/dist/apache_1.3.42.tar.gz

Apache Software Foundation Apache 1.3.6

Apache Software Foundation apache_1.3.42.tar.gz
http://httpd.apache.org/dev/dist/apache_1.3.42.tar.gz

Apache Software Foundation Apache 1.3.7 -dev

Apache Software Foundation apache_1.3.42.tar.gz
http://httpd.apache.org/dev/dist/apache_1.3.42.tar.gz

Apache Software Foundation Apache 1.3.9

Apache Software Foundation apache_1.3.42.tar.gz
http://httpd.apache.org/dev/dist/apache_1.3.42.tar.gz

References

Apache 1.3 mod_proxy HTTP Chunked Encoding Integer Overflow Vulnerability

References:

Apache Homepage (Apache Software Foundation)
Apache mod_proxy Homepage (Apache Software Foundation)
Changes with Apache 1.3.42 (Apache Software Foundation)
Mod_proxy from apache 1.3 - Integer overflow which causes heap overflow. (Adam Zabrocki)
Mod_proxy from apache 1.3 - Integer overflow which causes heap overflow. ([email protected])