CVE-2001-1072 Apache with mod_rewrite enabled on most UNIX systems allows remote attackers to bypass RewriteRules by inserting extra / (slash) characters into the requested path, which causes the regular expression...
MediumCVSS 5.0
EPSS 4.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Apache with mod_rewrite enabled on most UNIX systems allows remote attackers to bypass RewriteRules by inserting extra / (slash) characters into the requested path, which causes the regular expression in the RewriteRule to fail.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache HTTP Server | = 1.3.14 | No fix listed |
| Apache HTTP Server | = 1.3.17 | No fix listed |
| Apache HTTP Server | = 1.3.19 | No fix listed |
References
- www.apacheweek.com
- 20010812 Are your mod_rewrite rules doing what you expect? mailing-list patch vendor-advisory
- 3176 patch vdb-entry vendor-advisory
- apache-rewrite-bypass-directives(8633) vdb-entry