NVD

Id
72720  
Name
CVE-2004-2343  
Description
** DISPUTED ** Apache HTTP Server 2.0.47 and earlier allows local users to bypass .htaccess file restrictions, as specified in httpd.conf with directives such as Deny From All, by using an ErrorDocument directive. NOTE: the vendor has disputed this issue, since the .htaccess mechanism is only intended to restrict external web access, and a local user already has the privileges to perform the same operations without using ErrorDocument.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2004-12-31  
Modified Date
2017-07-10  
Seq
2004-2343  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
374823 72720 CVE-2004-2343 20040131 BUG IN APACHE HTTPD SERVER (current version 2.0.47)  View
374824 72720 CVE-2004-2343 20040202 Re: BUG IN APACHE HTTPD SERVER (current version 2.0.47)  View
374825 72720 CVE-2004-2343 20040204 Re: BUG IN APACHE HTTPD SERVER (current version 2.0.47)  View
374826 72720 CVE-2004-2343 apache-httpd-bypass-restriction(15015)  View

Related JVN