Vulnerability Database

296,843

Total vulnerabilities in the database

CVE-2001-1072

Apache with mod_rewrite enabled on most UNIX systems allows remote attackers to bypass RewriteRules by inserting extra / (slash) characters into the requested path, which causes the regular expression in the RewriteRule to fail.

Published: Aug 31, 2001
Updated: Apr 13, 2023
CVE: CVE-2001-1072
Severity: Medium
Exploit:

CVSS v2:

Severity: Medium
Score: 5
AV:N/AC:L/Au:N/C:N/I:N/A:P

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
apache / http_server	1.3.19	1.3.19.x
apache / http_server	1.3.17	1.3.17.x
apache / http_server	1.3.14	1.3.14.x

http://www.apacheweek.com/issues/02-02-01#security
http://www.securityfocus.com/archive/1/203955
http://www.securityfocus.com/bid/3176
https://exchange.xforce.ibmcloud.com/vulnerabilities/8633

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo