National Vulnerability Database (CVE-2001-0042)

National Cyber-Alert System Vulnerability Summary: CVE-2001-0042
Orirignal release date: 2001-02-16 Source: US-CERT/NIST ### Overview PHP 3.x (PHP3) on Apache 1.3.6 allows remote attackers to read arbitrary files via a modified .. (dot dot) attack containing &quot;%5c&quot; (encoded backslash) sequences. ### Impact CVSS Severity: 3.3 (Low) Range: remote Authentication: access Impact Type: conf ### Reference to Advisories, Solutions, and Tools External Source: Security Focus Name: bid 2060 Hyperlink: http://www.securityfocus.com/bid/2060 External Source: ISS X-Force Name: apache-php-disclose-files(5659) Hyperlink: http://xforce.iss.net/static/5659.php External Source: Bugtraq Name: BUGTRAQ:20001206 CHINANSL Security Advisory(CSA-200011) Hyperlink: http://www.securityfocus.com/archive/1/149210 ### Vulnerable Software and Vendor Apache (Apache Group) Technical Details CVE Standard Vulnerability Entry: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0042