← Back

CVE-2001-0131

nvd nist
Published: Mar 12, 2001Modified: Apr 16, 2026

JSON object

Loading...
3.3
Vector
AV:L/AC:M/Au:N/C:N/I:P/A:P
Exploitability: 3.4 / Impact: 4.9
Source: NVD

Description

htpasswd and htdigest in Apache 2.0a9, 1.3.14, and others allows local users to overwrite arbitrary files via a symlink attack.

Affected (3)

Apache
1 product
Http Server
Debian
1 product
Debian Linux
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Apache
Http Server
Version 1.3.14
Http Server
Version 2.0 alpha9
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Debian Linux
Version 2.2

Related CWEs

CWE-59
Improper Link Resolution Before File Access ('Link Following')
The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

References (8)

Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
PatchThird Party Advisory
Source: cve@mitre.org
Third Party AdvisoryVDB Entry
Source: cve@mitre.org
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry

Timeline

No history available yet.