CVE-2001-0925

Apache 1.3 - Artificially Long Slash Path Directory Listing

Severity Score

5.0

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The default installation of Apache before 1.3.19 allows remote attackers to list directories instead of the multiview index.html file via an HTTP request for a path that contains many / (slash) characters, which causes the path to be mishandled by (1) mod_negotiation, (2) mod_dir, or (3) mod_autoindex.

*Credits: N/A

CVSS Scores

NISTv2 5.0

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

None

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2001-03-12 CVE Published
2001-06-13 First Exploit
2002-01-31 CVE Reserved
2023-11-08 EPSS Updated
2024-08-08 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CAPEC

References (18)

URL	Tag	Source
http://www.securityfocus.com/archive/1/168497	Mailing List
http://www.securityfocus.com/archive/1/178066	Mailing List
http://www.securityfocus.com/cgi-bin/archive.pl?id=1&start=2002-01-27&end=2002-02-02&mid=199857&threads=1	Mailing List
https://exchange.xforce.ibmcloud.com/vulnerabilities/6921	Third Party Advisory
https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E	Mailing List

URL	Date	SRC
https://www.exploit-db.com/exploits/20692	2001-06-13
https://www.exploit-db.com/exploits/20693	2002-02-21
https://www.exploit-db.com/exploits/20694	2001-06-13
https://www.exploit-db.com/exploits/20695	2001-06-13
http://www.securityfocus.com/archive/1/193081	2024-08-08
http://www.securityfocus.com/bid/2503	2024-08-08

URL	Date	SRC

URL	Date	SRC
http://www.apacheweek.com/features/security-13	2023-11-07
http://www.debian.org/security/2001/dsa-067	2023-11-07
http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-077.php3	2023-11-07
http://www.linuxsecurity.com/advisories/other_advisory-1452.html	2023-11-07

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				1.3.11 Search vendor "Apache" for product "Http Server" and version "1.3.11"		-		Affected
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				1.3.12 Search vendor "Apache" for product "Http Server" and version "1.3.12"		-		Affected
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				1.3.14 Search vendor "Apache" for product "Http Server" and version "1.3.14"		-		Affected
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				1.3.17 Search vendor "Apache" for product "Http Server" and version "1.3.17"		-		Affected
Debian Search vendor "Debian"		Debian Linux Search vendor "Debian" for product "Debian Linux"				2.2 Search vendor "Debian" for product "Debian Linux" and version "2.2"		-		Affected