PT-2001-1946 · Apache+1 · Apache+2

Published 2001-10-12 · Updated 2024-02-02 · CVE-2001-0766

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Apache versions 1.3.19 and earlier on MacOS X Client 10.0.3 with the HFS+ file system

Description: The issue allows remote attackers to bypass access restrictions via a URL that contains some characters whose case is not matched by Apache's filters. This can be exploited by crafting a URL with specific characters to evade the filters.

Recommendations: For Apache on MacOS X Client 10.0.3 with the HFS+ file system, consider updating to a version that is not affected by this issue, or apply configuration changes to enhance the filtering of URLs and prevent case mismatch bypasses. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-178

Related Identifiers

CVE-2001-0766

Affected Products

Apache

Hfs+

Macos X Client

References · 6

• 🔥 https://exploit-db.com/exploits/20911 · Exploit
• 🔥 http://securityfocus.com/bid/2852 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-0766 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2001-06/0090.html · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0766 · Note
• https://t.me/cvenotify/69674 · Telegram Post