PT-2001-1946 · Apache+1 · Apache+2
CVE-2001-0766
·
Publicado
2001-10-12
·
Atualizado
2024-02-02
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions:
Apache versions 1.3.19 and earlier on MacOS X Client 10.0.3 with the HFS+ file system
Description:
The issue allows remote attackers to bypass access restrictions via a URL that contains some characters whose case is not matched by Apache's filters. This can be exploited by crafting a URL with specific characters to evade the filters.
Recommendations:
For Apache on MacOS X Client 10.0.3 with the HFS+ file system, consider updating to a version that is not affected by this issue, or apply configuration changes to enhance the filtering of URLs and prevent case mismatch bypasses.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Apache
Hfs+
Macos X Client