CVE

Id
3537  
CVE No.
CVE-2001-0729  
Status
Candidate  
Description
Apache 1.3.20 on Windows servers allows remote attackers to bypass the default index page and list directory contents via a URL with a large number of / (slash) characters.  
Phase
Modified (20071115)  
Votes
ACCEPT(5) Armstrong, Baker, Cole, Foat, Wall | MODIFY(1) Frech | NOOP(1) Christey  
Comments
Christey> The initial description originally stated that this was a | denial of service, but it"s really a directory listing | problem. I changed the description accordingly. | Frech> XF:apache-slash-directory-listing(6921) | Christey> XF:apache-slash-directory-listing(6921) is identifying a | different issue that has not had a CAN assigned yet. | Christey> SGI:20020301-01-P | URL:ftp://patches.sgi.com/support/free/security/advisories/20020301-01-P | Christey> CVE-2001-0925 and CVE-2001-0729 are different issues. | CVE-2001-0925 only applies to versions before 1.3.19, whereas | CVE-2001-0729 applies to 1.3.20, and only Windows. | | The Change Log at http://www.apache.org/dist/httpd/CHANGES_1.3 | specifically mentions these CANs separately.  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
15511 3537 CVE-2001-0729 CONFIRM:http://www.apacheweek.com/issues/01-09-28#security  View
15512 3537 CVE-2001-0729 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html  View
15513 3537 CVE-2001-0729 BID:22083  View
15514 3537 CVE-2001-0729 URL:http://www.securityfocus.com/bid/22083  View
15515 3537 CVE-2001-0729 SECTRACK:1017522  View
15516 3537 CVE-2001-0729 URL:http://securitytracker.com/id?1017522  View
15517 3537 CVE-2001-0729 SECUNIA:23794  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51364 JVNDB-2007-000026 Apache における不正なリクエストによりディレクトリ一覧が表示される脆弱性 Windows 版 Apache HTTP Server には、多くの "/" を含む URI を処理した際に、指定したデフォルトインデックスページではなくディレクトリ一覧が表示される脆弱性が存在します。 CVE-2001-0729 3537 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000026.html  View