Description

split-logfile in Apache 1.3.20 allows remote attackers to overwrite arbitrary files that end in the .log extension via an HTTP request with a / (slash) in the Host: header.

Remediation

References

CVE-2001-0730

Related Vulnerabilities

WordPress Plugin Easy Forms for Mailchimp PHP Code Injection (6.5.2)

PHP Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-9767)

Liferay DXP Insertion of Sensitive Information Into Sent Data Vulnerability (CVE-2025-43768)

Chamilo Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-4220)

phpBB Server-Side Request Forgery (SSRF) Vulnerability (CVE-2017-1000419)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2001-0730