CVEvulnerability

CVE-2001-1342

5.0 MEDIUM Published 2001-05-12 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2001-05-12
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P

Description

Apache before 1.3.20 on Windows and OS/2 systems allows remote attackers to cause a denial of service (GPF) via an HTTP request for a URI that contains a large number of / (slash) or other characters, which causes certain functions to dereference a null pointer.

Affected configurations

• apache http server 1.3.12 • apache http server 1.3.14 • apache http server 1.3.15 • apache http server 1.3.16 • apache http server 1.3.17 • apache http server 1.3.18 • apache http server 1.3.19

References