Vulnerability in Apache Http Server

CVE-2001-1072

Apache with mod_rewrite enabled on most UNIX systems allows remote attackers to bypass RewriteRules by inserting extra / (slash) characters into the requested path, which causes the regular expression in the RewriteRule to fail.

EPSS: 0.043 (90.2th percentile) — read the EPSS interpretation.

Affected products

Apache Http_server — versions 1.3.14, 1.3.17, 1.3.19
N/a — versions n/a

References

cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ, Patch)
cve@mitre.org (vdb-entry, x_refsource_XF)