CVE-2002-0661: High severity Apache HTTP Server vulnerability
Directory traversal vulnerability in Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to read arbitrary files and execute commands via .. (dot dot) sequences containing \ (backslash) characters.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0661?
CVE-2002-0661 is considered a critical security vulnerability due to its potential for unauthorized file access and command execution.
How do I fix CVE-2002-0661?
To fix CVE-2002-0661, upgrade to a patched version of Apache HTTP Server that is not vulnerable to this directory traversal issue.
Which versions of Apache are affected by CVE-2002-0661?
CVE-2002-0661 affects Apache HTTP Server versions 2.0 through 2.0.39 on Windows, OS2, and Netware.
What type of attack does CVE-2002-0661 enable?
CVE-2002-0661 allows remote attackers to read arbitrary files and execute commands on the server.
Is CVE-2002-0661 limited to specific operating systems?
Yes, CVE-2002-0661 is specifically noted to affect Apache HTTP Server on Windows, OS2, and Netware.