K6878 : Apache Rewrite module (mod_rewrite) vulnerabilities CVE-2006-3747

Security Advisory Description

Note: Versions that are not listed in this article have not been evaluated for vulnerability to this security advisory. For information about the F5 security policy regarding evaluating older and unsupported versions of F5 products, refer to K4602: Overview of the F5 security vulnerability response policy.

F5 products and versions that have been evaluated for this Security Advisory

This security advisory describes an off-by-one error, which means the bits are shifted to the left or the right by one value, in the LDAP scheme handling of the Apache Rewrite module. The vulnerability within the Apache Rewrite module allows remote attackers to cause a Denial of Service attack or use rewrite rules to add arbitrary code into URLs that the Apache Rewrite module did not handle correctly.

Information about this advisory is available at the following location:

<https://vulners.com/cve/CVE-2006-3747&gt;