Debian/apache2: unknown

CRLF injection vulnerability in the mod_negotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x series, 2.0.61 and earlier in the 2.0.x series, and 1.3.39 and earlier in the 1.3.x

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: DEBIAN-CVE-2008-0456
• https://security-tracker.debian.org/tracker/CVE-2008-0456

published 2008-01-25T01:00:00Z · modified 2026-10-23T17:47:41.196276453Z · JSON