CVE-2001-0042 PHP 3.x (PHP3) on Apache 1.3.6 allows remote attackers to read arbitrary files via a modified .. (dot dot) attack containing "%5c" (encoded backslash) sequences.
MediumCVSS 5.0
EPSS 9.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP 3.x (PHP3) on Apache 1.3.6 allows remote attackers to read arbitrary files via a modified .. (dot dot) attack containing "%5c" (encoded backslash) sequences.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache HTTP Server | = 1.3 | No fix listed |
References
- 20001206 CHINANSL Security Advisory(CSA-200011) exploit mailing-list vendor-advisory
- 2060 exploit vdb-entry vendor-advisory
- apache-php-disclose-files(5659) vdb-entry