CVE-2000-1206 — Apache Http Server vulnerability

4 documents4 sources
Severity
5.0MEDIUMNVD
EPSS
3.1%
top 13.21%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Apache Http Server
Timeline
PublishedAug 20
Latest updateApr 30

Description

Vulnerability in Apache httpd before 1.3.11, when configured for mass virtual hosting using mod_rewrite, or mod_vhost_alias in Apache 1.3.9, allows remote attackers to retrieve arbitrary files.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDapache/http_server1.3.10, 1.3.9+1

🔴Vulnerability Details

2
GHSA
GHSA-f2r2-4jrp-f3ph: Vulnerability in Apache httpd before 1↗2022-04-30
▶
CVEList
CVE-2000-1206: Vulnerability in Apache httpd before 1↗2002-08-31
▶

💥Exploits & PoCs

1
Exploit-DB
KDE 1.1/1.1.1/1.2/2.0 kscd - SHELL Environmental Variable↗2000-05-16
▶
CVE-2000-1206 — Apache Http Server vulnerability | cvebase