CVE-2006-3747
HighPublic exploitOff-by-one error in the ldap scheme handling in the Rewrite module (mod_rewrite) in Apache 1.3 from 1.3.28, 2.0.46 and other versions before 2.0.59, and 2.2, when RewriteEngine is enabled, allows remote attackers to cause a denial of service (application crash) and possibly…
Published Jul 28, 2006 · Updated Aug 4, 2026 · Also known as DEBIAN-CVE-2006-3747, DSA-1131-1, DSA-1132-1
Key Facts
Patch immediately- CVE-2006-3747 is a high-severity vulnerability (CVSS 7.6 v2) affecting HTTP Server (Apache), Ubuntu Linux (Canonical), Debian Linux and 3 more products.
- It is not listed in any known-exploited vulnerabilities catalog. Public exploit code is available.
- EPSS estimates a 97% probability of exploitation in the next 30 days.
- Fixed versions are available, including apache 1.3.33-6sarge2, HTTP Server 1.3.37, apache2 2.0.54-5sarge1.
- Brandefense priority: patch immediately, because it is very likely to be exploited soon.
CVSS v2
7.6
AV:N/AC:H/Au:N/C:C/I:C/A:C
EPSS (30-day exploit likelihood)
97%
Higher than 99.8% of all scored CVEs
Exploited in the wild
No known
Not in a known-exploited catalog
Public exploit code
Available
Proof-of-concept or weaponized module
Get the full CVE-2006-3747 brief as a PDF
Every affected product and fixed release, exploitation status and a first 24 hours response checklist, emailed within minutes.
Description
Off-by-one error in the ldap scheme handling in the Rewrite module (mod_rewrite) in Apache 1.3 from 1.3.28, 2.0.46 and other versions before 2.0.59, and 2.2, when RewriteEngine is enabled, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted URLs that are not properly handled using certain rewrite rules.
Affected Products
20 affected entries in total| Product | Affected versions | Fixed in |
|---|---|---|
| HTTP ServerApache | See advisory | 1.3.37 |
| Ubuntu LinuxCanonical | 5.04, 5.10, 6.06 | n/a |
| Debian LinuxDebian | 3.1 | n/a |
| apache2debian | See advisory | 2.0.55-4.1 |
| apachedebian | See advisory | 1.3.33-6sarge2 |
Patched Releases
apache
1.3.33-6sarge2
HTTP Server
1.3.37
apache2
2.0.54-5sarge1, 2.0.55-4.1, 2.4.49-1.1
rootio-apache2
2.0.55-4.1
Timeline
Publicly disclosed
Jul 28, 2006
Last updated
Aug 4, 2026
Weakness Type
- CWE-189
References
- advisoryhttp://docs.info.apple.com/article.html?artnum=307562
- advisoryHPSBMA02250
- advisorySSRT071293
- advisoryhttp://kbase.redhat.com/faq/FAQ_68_8653.shtm
- advisoryAPPLE-SA-2008-03-18
FAQ
Common Questions.
Off-by-one error in the ldap scheme handling in the Rewrite module (mod_rewrite) in Apache 1.3 from 1.3.28, 2.0.46 and other versions before 2.0.59, and 2.2, when RewriteEngine is enabled, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted URLs that…
Affected: HTTP Server (Apache); Ubuntu Linux (Canonical) versions 5.04, 5.10, 6.06; Debian Linux versions 3.1, among others. The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
Public exploit code is available.
Fixed versions are available, including apache 1.3.33-6sarge2, HTTP Server 1.3.37, apache2 2.0.54-5sarge1.
Brandefense priority: patch immediately, because it is very likely to be exploited soon.
Is CVE-2006-3747 Running On Your Attack Surface?
Brandefense maps vulnerabilities like this one to your internet-facing assets and tells you exactly where to patch.
Request A Demo