CVE-2001-0766 Apache on MacOS X Client 10.0.3 with the HFS+ file system allows remote attackers to bypass access restrictions via a URL that contains some characters whose case is not matched by Apache's filters.
CriticalCVSS 9.8
EPSS 8.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Apache on MacOS X Client 10.0.3 with the HFS+ file system allows remote attackers to bypass access restrictions via a URL that contains some characters whose case is not matched by Apache's filters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache HTTP Server | = 1.3.14 | No fix listed |
References
- 20010610 Mac OS X - Apache & Case Insensitive Filesystems broken-link mailing-list patch vendor-advisory
- 2852 broken-link exploit patch third-party-advisory vdb-entry vendor-advisory