CVE-2001-0925
MEDIUM 5.0EPSS 75.2%
The default installation of Apache before 1.3.19 allows remote attackers to list directories instead of the multiview index.html file via an HTTP request for a path that contains many / (slash) characters, which causes the path to be mishandled by (1) mod_negotiation, (2) mod_dir, or (3) mod_autoindex.
- CVSS v2.0
- 5.0 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N - EPSS
- 75.24% chance of exploitation in the next 30 days, 99th percentile
- Published
- 2002-02-02
- Updated
- 2024-08-08
Proof-of-concept exploits (1)
ExploitDB entries (4)
- https://www.exploit-db.com/exploits/20695
- https://www.exploit-db.com/exploits/20694
- https://www.exploit-db.com/exploits/20693
- https://www.exploit-db.com/exploits/20692