CVE-2001-0766
CRITICALApache on MacOS X Client 10.0.3 - Auth Bypass
Title source: llmDescription
Apache on MacOS X Client 10.0.3 with the HFS+ file system allows remote attackers to bypass access restrictions via a URL that contains some characters whose case is not matched by Apache's filters.
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by Stefan Arentz · textremoteosx
https://www.exploit-db.com/exploits/20911
Scores
CVSS v3
9.8
EPSS
0.1143
EPSS Percentile
93.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-178
Status
published
Products (1)
apache/http_server
1.3.14
Published
Oct 18, 2001
Tracked Since
Feb 18, 2026