CVE-2001-1072: Medium severity Apache HTTP Server vulnerability
Apache with modrewrite enabled on most UNIX systems allows remote attackers to bypass RewriteRules by inserting extra / (slash) characters into the requested path, which causes the regular expression in the RewriteRule to fail.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2001-1072?
CVE-2001-1072 is considered a moderate severity vulnerability as it allows remote attackers to bypass security measures.
How do I fix CVE-2001-1072?
To fix CVE-2001-1072, update to a version of Apache that is not vulnerable, such as versions later than 1.3.19.
What versions of Apache are affected by CVE-2001-1072?
CVE-2001-1072 affects Apache HTTP Server versions 1.3.14, 1.3.17, and 1.3.19.
What attack vectors are associated with CVE-2001-1072?
The attack vector for CVE-2001-1072 involves remote exploitation through crafted requests containing extra slash characters.
What protections can prevent CVE-2001-1072 exploitation?
To prevent exploitation of CVE-2001-1072, implement strict input validation and avoid using mod_rewrite when unnecessary.