CVE - CVE-2001-0729

CVE-ID
CVE-2001-0729	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Apache 1.3.20 on Windows servers allows remote attackers to bypass the default index page and list directory contents via a URL with a large number of / (slash) characters.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:22083 URL:http://www.securityfocus.com/bid/22083 CONFIRM:http://www.apacheweek.com/issues/01-09-28#security CONFIRM:http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html MLIST:[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/ URL:https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9@%3Ccvs.httpd.apache.org%3E MLIST:[httpd-cvs] 20210330 svn commit: r1073140 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html URL:https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5@%3Ccvs.httpd.apache.org%3E MLIST:[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/ URL:https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920@%3Ccvs.httpd.apache.org%3E MLIST:[httpd-cvs] 20210606 svn commit: r1075470 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html URL:https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e@%3Ccvs.httpd.apache.org%3E SECTRACK:1017522 URL:http://securitytracker.com/id?1017522 SECUNIA:23794 URL:http://secunia.com/advisories/23794
Assigning CNA
MITRE Corporation
Date Record Created
20011008	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Modified (20071115)
Votes (Legacy)
ACCEPT(5) Armstrong, Baker, Cole, Foat, Wall MODIFY(1) Frech NOOP(1) Christey
Comments (Legacy)
Christey> The initial description originally stated that this was a denial of service, but it's really a directory listing problem. I changed the description accordingly. Frech> XF:apache-slash-directory-listing(6921) Christey> XF:apache-slash-directory-listing(6921) is identifying a different issue that has not had a CAN assigned yet. Christey> SGI:20020301-01-P URL:ftp://patches.sgi.com/support/free/security/advisories/20020301-01-P Christey> CVE-2001-0925 and CVE-2001-0729 are different issues. CVE-2001-0925 only applies to versions before 1.3.19, whereas CVE-2001-0729 applies to 1.3.20, and only Windows. The Change Log at http://www.apache.org/dist/httpd/CHANGES_1.3 specifically mentions these CANs separately.
Proposed (Legacy)
20011012
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)