Apache Http Server version 2.0: Security vulnerabilities, exploits, vulnerability statistics, CVSS scores and references (e.g.: CVE-2009-1234 or 2010-1234 or 20101234) Log In Register. Fixed in Apache HTTP Server 2.0.45 important: Line feed memory leak DoS (CVE-2003-0132) Apache 2.0 versions before Apache 2.0.45 had a significant Denial of Service vulnerability. Remote attackers could cause a denial of service (memory consumption) via large chunks of linefeed characters, which causes Apache to allocate 80 bytes for each linefeed. Apache HTTP Server Version 2.0. Apache HTTP Server Documentation. Apache HTTP Server Version 2.0 Documentation. Available Languages: en. Apache HTTP Server Version 2.4 Documentation. New features with Apache 2.3/2.4; New features with Apache 2.1/2.2. Version 2.0 of the Apache HTTP Server Plug-In improves performance by using a reusable pool of connections from the plug-in to WebLogic Server. The plug-in implements HTTP 1.1 keep-alive connections between the plug-in and WebLogic Server by reusing the same connection in the pool for subsequent requests from the same client.

  1. Apache Http Server Version 2.4
  2. Apache Web Server Latest Version
  3. Apache Http Server 2.0 End Of Support

Essentials

Download!

  • Trunk (dev)
  • Get Involved

    Subprojects

    Downloading the Apache HTTP Server

    Use the links below to download the Apache HTTP Server from one ofour mirrors. You mustverify theintegrity of the downloaded files using signatures downloaded fromour main distribution directory.

    Only current recommended releases are available on the maindistribution site and its mirrors. Older releases are available fromthe archive downloadsite.

    If you are downloading the Win32 distribution, please read these importantnotes.

    Mirror

    [if-any logo][end]The currently selected mirror is [preferred]. If you encounter aproblem with this mirror, please select another mirror. If allmirrors are failing, there are backup mirrors (at the end ofthe mirrors list) that should be available.

    You may also consult the completelist of mirrors.

    Apache HTTP Server is the best available version

    The Apache HTTP Server Project is pleased to announce the release of ApacheHTTP Server, version . This release represents ten years of innovationby the project, and is recommended over all previous releases!

    For details see the Official Announcement and the CHANGES_2.2 and lists

    Add-in modules for Apache 1.3 or 2.0 are not compatible with Apache 2.2. If you are running third party add-in modules, you must obtain modules compilied or updated for Apache 2.2 from that third party, before you attempt to upgrade from these previous versions. Modules compiled for Apache 2.2 should continue to work for all 2.2.x releases.

    • Unix Source: [ [ [[[

    Apache is the current stable version of the 2.0 series, andis recommended over any previous 2.0 release. This releasefixes a few potential security vulnerabilites.

    For details see the Official Announcement and the CHANGES_2.0 and lists.

    Apache 2.0 add-in modules are not compatible with Apache 1.3 nor 2.2 modules. If you are running third party add-in modules, you will need to obtain modules compiled for or compatible with Apache 2.0 from that third party, before you attempt to use this specific release.

    • Unix Source: [ [ [[[

    Apache is the current stable version of the 1.3 series, andis recommended over any previous 1.3 release. This release is basicallya security fix release.

    For details see the Official Announcement and the CHANGES_1.3 and lists.

    Use the Apache version only if you must use a third party modulethat is not available as an Apache 2.x module. Modules compiled for Apache 2.xare not compatible with Apache 1.3, and modules compiled for Apache 1.3 arenot compatible with Apache 2.x.

    • Unix Source: [[[or
      % pgp -ka KEYS
      % pgp httpd-.tar.gz.asc
      or
      % gpg --import KEYS
      % gpg --verify httpd-.tar.gz.asc
      • httpd-.tar.* is signed by William A. Rowe, Jr. B55D9977(7F7214A7)
      • httpd-.tar.* is signed by Jim Jagielski 08C975E5
      • apache_.tar.* is signed by Jim Jagielski 08C975E5
      • apache_*.msi are signed by William A. Rowe, Jr. B55D9977(7F7214A7)
      • httpd-2.*-win32-src.zip are signed by William A. Rowe, Jr. B55D9977(7F7214A7)
      • mod-ftp-0.9.2-beta* are signed by William A. Rowe, Jr. B55D9977(7F7214A7)

      Alternatively, you can verify the MD5 signature on the files. Aunix program called md5 or md5sum isincluded in many unix distributions. It is also available as part ofGNUTextutils. Windows users can get binary md5 programs from here, here, orhere.

    Copyright © 2009 The Apache Software Foundation
    Apache Http Server Version 2.0Server

    Apache Http Server Version 2.4

    Apache Http Server Version 2.0

    Apache Web Server Latest Version

    Server

    Apache Http Server 2.0 End Of Support