CVE-2001-0925 json
The default installation of Apache before 1.3.19 allows remote attackers to list directories instead of the multiview index.html file via a…
published 25y ago modified 4mo ago also EUVD-2001-0908
- cvss
- 5.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 75.2%
- EPSS 75.2% chance of exploitation in 30 days, percentile 99.5%
- public exploits
- 4
- Exploit-DB
Summary
The default installation of Apache before 1.3.19 allows remote attackers to list directories instead of the multiview index.html file via an HTTP request for a path that contains many / (slash) characters, which causes the path to be mishandled by (1) mod_negotiation, (2) mod_dir, or (3) mod_autoindex.
Patch / fix
- securityfocus.com/bid/2503 advisory
Is CVE-2001-0925 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.
Check with FencerTimeline
- Published
- First public exploit (EDB-20695)
Exploit prediction
75.24% chance of exploitation in the next 30 days, higher than 99.5% of all scored CVEs (FIRST EPSS, 2026-11-14).
Exploits and checks
- EDB-20695 Apache 1.3 - Artificially Long Slash Path Directory Listing (4) remote, 2001-06-13
- EDB-20694 Apache 1.3 - Artificially Long Slash Path Directory Listing (3) remote, 2001-06-13
- EDB-20693 Apache 1.3 - Artificially Long Slash Path Directory Listing (2) remote, 2002-02-21
- EDB-20692 Apache 1.3 - Artificially Long Slash Path Directory Listing (1) remote, 2001-06-13
- securityfocus.com http://www.securityfocus.com/bid/2503 referenced PoC, tagged "exploit" by a source, unverified
- securityfocus.com http://www.securityfocus.com/archive/1/193081 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Classification
- Weakness
-
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory
- Technology feeds
References
-
securityfocus.com
/bid/2503
vdb-entry, exploit, patch, third-party-advisory
-
securityfocus.com
/archive/1/193081
mailing-list, exploit, third-party-advisory, vdb-entry
-
linuxsecurity.com
/advisories/other_advisory-1452.html
vendor-advisory, third-party-advisory
-
debian.org
/security/2001/dsa-067
vendor-advisory, third-party-advisory
-
linux-mandrake.com
/en/security/2001/MDKSA-2001-077.php3
vendor-advisory, broken-link
-
apacheweek.com
/features/security-13
vendor-advisory
-
securityfocus.com
/archive/1/178066
mailing-list, third-party-advisory, vdb-entry
-
securityfocus.com
/cgi-bin/archive.pl?id=1&start=2002-01-27&end=2002-02-02&mid=199857&threads=1
mailing-list, third-party-advisory, vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/6921
vdb-entry, third-party-advisory
-
securityfocus.com
/archive/1/168497
mailing-list, third-party-advisory, vdb-entry
-
lists.apache.org
/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E
mailing-list
-
lists.apache.org
/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E
mailing-list
-
lists.apache.org
/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E
mailing-list
-
lists.apache.org
/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E
mailing-list
Sources
- CVE List CVE-2001-0925
- NVD CVE-2001-0925
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.