Lucene search
HistoryMar 12, 2001 - 5:00 a.m.
CVE-2001-0131
3.3 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:N/I:P/A:P
6.1 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
htpasswd and htdigest in Apache 2.0a9, 1.3.14, and others allows local users to overwrite arbitrary files via a symlink attack.
Affected configurations
Node
apachehttp_serverMatch1.3.14
ORapachehttp_serverMatch2.0alpha9
Node
debiandebian_linuxMatch2.2
Related
nessus
nessus
Debian DSA-021-1 : apache - insecure tempfile bug, broken mod_rewrite
2004-09-29 00:00:00
Debian DSA-187-1 : apache - several vulnerabilities
2004-09-29 00:00:00
Debian DSA-188-1 : apache-ssl - several vulnerabilities
2004-09-29 00:00:00
openvas
openvas
Debian Security Advisory DSA 021-1 (apache)
2008-01-17 00:00:00
Debian Security Advisory DSA 021-1 (apache)
2008-01-17 00:00:00
Debian Security Advisory DSA 187-1 (apache)
2008-01-17 00:00:00
cve
cve
CVE-2001-0131
2001-03-12 05:00:00
CVE-2002-1233
2002-11-04 05:00:00
cvelist
cvelist
CVE-2001-0131
2001-02-14 05:00:00
CVE-2002-1233
2002-10-25 04:00:00
nvd
nvd
CVE-2002-1233
2002-11-04 05:00:00
debian
debian
[SECURITY] [DSA 187-1] New Apache packages fix several vulnerabilities
2002-11-04 15:26:57
[SECURITY] [DSA 188-1] New Apache-SSL packages fix several vulnerabilities
2002-11-05 14:55:02
[SECURITY] [DSA 187-1] New Apache packages fix several vulnerabilities
2002-11-04 15:26:57
osv
osv
apache-perl - several vulnerabilities
2002-11-13 00:00:00
apache - several vulnerabilities
2002-11-04 00:00:00
apache-ssl - several vulnerabilities
2002-11-05 00:00:00
3.3 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:N/I:P/A:P
6.1 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for NVD:CVE-2001-0131