CVE-2001-0730: Medium severity Apache HTTP Server vulnerability
Published Oct 30, 2001
·Updated
split-logfile in Apache 1.3.20 allows remote attackers to overwrite arbitrary files that end in the .log extension via an HTTP request with a / (slash) in the Host: header.
Affected Software
1 affected component
Apache HTTP Server=1.3.20
Event History
Oct 30, 2001
CVE Published
05:00 AM
Mar 9, 2002
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2001-0730?
CVE-2001-0730 is a high severity vulnerability due to the ability of remote attackers to overwrite arbitrary log files.
2
How do I fix CVE-2001-0730?
To fix CVE-2001-0730, you should upgrade to a patched version of Apache HTTP Server that is later than 1.3.20.
3
What does CVE-2001-0730 affect?
CVE-2001-0730 affects Apache HTTP Server version 1.3.20.
4
Can CVE-2001-0730 lead to information disclosure?
Yes, CVE-2001-0730 can potentially lead to information disclosure if sensitive log files are overwritten.
5
Is CVE-2001-0730 easy to exploit?
CVE-2001-0730 is considered easy to exploit, allowing attackers to manipulate log files with a specially crafted HTTP request.