CVE-2000-0913

Apache HTTP Server <= 1.3.12 - Arbitrary File Read via mod_rewrite RewriteRule Expansion

Title source: llm

Description

mod_rewrite in Apache 1.3.12 and earlier allows remote attackers to read arbitrary files if a RewriteRule directive is expanded to include a filename whose name contains a regular expression.

References (15)

Core 15

Core References

Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2000-095.html

Patch, Vendor Advisory vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/1728

Third Party Advisory vendor-advisory x_refsource_hp

http://archives.neohapsis.com/archives/hp/2000-q4/0021.html

Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2000-088.html

Third Party Advisory mailing-list x_refsource_bugtraq

http://archives.neohapsis.com/archives/bugtraq/2000-09/0352.html

Third Party Advisory mailing-list x_refsource_bugtraq

http://archives.neohapsis.com/archives/bugtraq/2000-10/0174.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/5310

Vendor Advisory vendor-advisory x_refsource_caldera

http://www.calderasystems.com/support/security/advisories/CSSA-2000-035.0.txt

Various Sources vendor-advisory x_refsource_mandrake

http://www.linux-mandrake.com/en/security/MDKSA-2000-060-2.php3?dis=7.1