Description

split-logfile in Apache 1.3.20 allows remote attackers to overwrite arbitrary files that end in the .log extension via an HTTP request with a / (slash) in the Host: header.

Remediation

References

CVE-2001-0730

Related Vulnerabilities

WordPress Plugin WP-SendSMS Cross-Site Request Forgery (1.0)

Jetty Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-2080)

WordPress Plugin Flexible Captcha Multiple Vulnerabilities (3.3)

Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-0244)

WordPress Plugin rtMedia for WordPress, BuddyPress and bbPress Cross-Site Scripting (3.10.1)

Severity

Medium

Classification

CVE-2001-0730

Tags

Missing Update Known Vulnerabilities