CVE-2003-0017: Medium severity Apache HTTP Server vulnerability
Published Feb 7, 2003
·Updated
Apache 2.0 before 2.0.44 on Windows platforms allows remote attackers to obtain certain files via an HTTP request that ends in certain illegal characters such as ">", which causes a different filename to be processed and served.
Affected Software
8 affected components
Apache HTTP Server=2.0.42
Apache HTTP Server=2.0.37
Apache HTTP Server=2.0.39
Apache HTTP Server=2.0.41
Apache HTTP Server=2.0.38
Apache HTTP Server=2.0.40
Apache HTTP Server=2.0.36
Apache HTTP Server=2.0.43
Event History
Feb 7, 2003
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
DescriptionSeverityAffected Software
Sep 1, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2003-0017?
CVE-2003-0017 is classified as a security vulnerability potentially allowing unauthorized file access.
2
How do I fix CVE-2003-0017?
To fix CVE-2003-0017, upgrade your Apache HTTP Server to version 2.0.44 or later.
3
Which versions of Apache are affected by CVE-2003-0017?
CVE-2003-0017 affects Apache HTTP Server versions 2.0.36 to 2.0.43 on Windows platforms.
4
What are the possible consequences of CVE-2003-0017?
The consequences of CVE-2003-0017 include unauthorized access to sensitive files on the server.
5
Is CVE-2003-0017 still a risk for current Apache users?
CVE-2003-0017 is not a risk for current Apache users who have updated to version 2.0.44 or later.