CVE-2001-0131 htpasswd and htdigest in Apache 2.0a9, 1.3.14, and others allows local users to overwrite arbitrary files via a symlink attack.
LowCVSS 3.3
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
htpasswd and htdigest in Apache 2.0a9, 1.3.14, and others allows local users to overwrite arbitrary files via a symlink attack.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache HTTP Server | = 1.3.14 | No fix listed |
| Apache HTTP Server | = 2.0-alpha9 | No fix listed |
| debian linux | = 2.2 | No fix listed |
References
- 20010110 Immunix OS Security update for lots of temp file problems mailing-list third-party-advisory
- DSA-021 patch third-party-advisory vendor-advisory
- 2182 third-party-advisory vdb-entry
- linux-apache-symlink(5926) third-party-advisory vdb-entry