CVE

Id
3538  
CVE No.
CVE-2001-0730  
Status
Entry  
Description
split-logfile in Apache 1.3.20 allows remote attackers to overwrite arbitrary files that end in the .log extension via an HTTP request with a / (slash) in the Host: header.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
15518 3538 CVE-2001-0730 CONFIRM:http://www.apacheweek.com/issues/01-09-28#security  View
15519 3538 CVE-2001-0730 MANDRAKE:MDKSA-2001:077  View
15520 3538 CVE-2001-0730 URL:http://frontal2.mandriva.com/security/advisories?name=MDKSA-2001:077  View
15521 3538 CVE-2001-0730 CONECTIVA:CLA-2001:430  View
15522 3538 CVE-2001-0730 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000430  View
15523 3538 CVE-2001-0730 ENGARDE:ESA-20011019-01  View
15524 3538 CVE-2001-0730 URL:http://www.linuxsecurity.com/advisories/other_advisory-1649.html  View
15525 3538 CVE-2001-0730 REDHAT:RHSA-2001:126  View
15526 3538 CVE-2001-0730 URL:http://www.redhat.com/support/errata/RHSA-2001-126.html  View
15527 3538 CVE-2001-0730 REDHAT:RHSA-2001:164  View
15528 3538 CVE-2001-0730 URL:http://www.redhat.com/support/errata/RHSA-2001-164.html  View
15529 3538 CVE-2001-0730 XF:apache-log-file-overwrite(7419)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
64206 JVNDB-2001-000180 Apache HTTP Server の split-logfile におけるファイルを追記される脆弱性 Apache HTTP Server において、split-logfile をサポートしているプログラムに実装の不備が存在し、.log ファイルに追加の記述が可能である脆弱性が存在します。 CVE-2001-0730 3538 5 http://jvndb.jvn.jp/ja/contents/2001/JVNDB-2001-000180.html  View