CVE-2000-0913: Medium severity Apache HTTP Server vulnerability
modrewrite in Apache 1.3.12 and earlier allows remote attackers to read arbitrary files if a RewriteRule directive is expanded to include a filename whose name contains a regular expression.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0913?
CVE-2000-0913 is considered a high severity vulnerability due to its ability to allow remote attackers to read arbitrary files.
How do I fix CVE-2000-0913?
To fix CVE-2000-0913, update Apache to a version later than 1.3.12 that does not contain this vulnerability.
Which versions of Apache are affected by CVE-2000-0913?
CVE-2000-0913 affects Apache 1.3.12 and earlier versions, including 1.0.5, 1.1.1, and various other versions.
Can the exploitation of CVE-2000-0913 lead to data leakage?
Yes, the exploitation of CVE-2000-0913 can lead to significant data leakage, as attackers can read arbitrary files from the server.
Is there a workaround for CVE-2000-0913 if I cannot immediately update Apache?
A possible workaround for CVE-2000-0913 is to disable mod_rewrite or restrict its use to a safe configuration until an update can be applied.