CVE-2000-0913

Published: Dec 19, 2000Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

mod_rewrite in Apache 1.3.12 and earlier allows remote attackers to read arbitrary files if a RewriteRule directive is expanded to include a filename whose name contains a regular expression.

Affected (10)

Products: Apache: Http Server

1 product

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Apache Http Server	Version 0.8.11
Apache Http Server	Version 0.8.14
Apache Http Server	Version 1.0.2
Apache Http Server	Version 1.0.3
Apache Http Server	Version 1.0.5
Apache Http Server	Version 1.0
Apache Http Server	Version 1.1.1
Apache Http Server	Version 1.1
Apache Http Server	Version 1.3.11
Apache Http Server	Version 1.3.12

References (30)

http://archives.neohapsis.com/archives/bugtraq/2000-09/0352.html

Source: cve@mitre.org

http://archives.neohapsis.com/archives/bugtraq/2000-10/0174.html

Source: cve@mitre.org

http://archives.neohapsis.com/archives/hp/2000-q4/0021.html

Source: cve@mitre.org

http://www.calderasystems.com/support/security/advisories/CSSA-2000-035.0.txt

Source: cve@mitre.org

http://www.linux-mandrake.com/en/security/MDKSA-2000-060-2.php3?dis=7.1

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2000-088.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2000-095.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/1728

Source: cve@mitre.org

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/5310

Source: cve@mitre.org

https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

http://archives.neohapsis.com/archives/bugtraq/2000-09/0352.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://archives.neohapsis.com/archives/bugtraq/2000-10/0174.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://archives.neohapsis.com/archives/hp/2000-q4/0021.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.calderasystems.com/support/security/advisories/CSSA-2000-035.0.txt

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.linux-mandrake.com/en/security/MDKSA-2000-060-2.php3?dis=7.1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2000-088.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2000-095.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/1728

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/5310

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.