CVE

Id
3731  
CVE No.
CVE-2001-0925  
Status
Candidate  
Description
The default installation of Apache before 1.3.19 allows remote attackers to list directories instead of the multiview index.html file via an HTTP request for a path that contains many / (slash) characters, which causes the path to be mishandled by (1) mod_negotiation, (2) mod_dir, or (3) mod_autoindex.  
Phase
Proposed (20020131)  
Votes
ACCEPT(5) Armstrong, Baker, Cole, Foat, Green | NOOP(2) Christey, Wall | REJECT(1) Frech  
Comments
Frech> I"m using both candidates until we decide if it is a dupe, | and then which | candidate to deprecate. | Christey> BUGTRAQ:20010615 TSLSA-2001-0010 - Apache | URL:http://archives.neohapsis.com/archives/bugtraq/2001-06/0180.html | Christey> CVE-2001-0925 and CVE-2001-0729 are different issues. | CVE-2001-0925 only applies to versions before 1.3.19, whereas | CVE-2001-0729 applies to 1.3.20, and only Windows. | | The Change Log at http://www.apache.org/dist/httpd/CHANGES_1.3 | specifically mentions these CANs separately.  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
16829 3731 CVE-2001-0925 BUGTRAQ:20010312 FORW: [ANNOUNCE] Apache 1.3.19 Released  View
16830 3731 CVE-2001-0925 URL:http://www.securityfocus.com/archive/1/168497  View
16831 3731 CVE-2001-0925 BUGTRAQ:20010624 Fw: Bugtraq ID 2503 : Apache Artificially Long Slash Path Directory Listing Exploit  View
16832 3731 CVE-2001-0925 URL:http://www.securityfocus.com/archive/1/193081  View
16833 3731 CVE-2001-0925 BUGTRAQ:20010419 OpenBSD 2.8patched Apache vuln!  View
16834 3731 CVE-2001-0925 URL:http://www.securityfocus.com/archive/1/178066  View
16835 3731 CVE-2001-0925 BUGTRAQ:20010726 Apache Artificially Long Slash Path Directory Listing Vulnerabili ty -- FILE READ ACCESS  View
16836 3731 CVE-2001-0925 URL:http://www.securityfocus.com/cgi-bin/archive.pl?id=1&start=2002-01-27&end=2002-02-02&mid=199857&threads=1  View
16837 3731 CVE-2001-0925 CONFIRM:http://www.apacheweek.com/features/security-13  View
16838 3731 CVE-2001-0925 MANDRAKE:MDKSA-2001:077  View
16839 3731 CVE-2001-0925 URL:http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-077.php3  View
16840 3731 CVE-2001-0925 DEBIAN:DSA-067  View
16841 3731 CVE-2001-0925 URL:http://www.debian.org/security/2001/dsa-067  View
16842 3731 CVE-2001-0925 ENGARDE:ESA-20010620-02  View
16843 3731 CVE-2001-0925 URL:http://www.linuxsecurity.com/advisories/other_advisory-1452.html  View
16844 3731 CVE-2001-0925 BID:2503  View
16845 3731 CVE-2001-0925 URL:http://www.securityfocus.com/bid/2503  View
16846 3731 CVE-2001-0925 XF:apache-slash-directory-listing(6921)  View

Related JVN