Description

split-logfile in Apache 1.3.20 allows remote attackers to overwrite arbitrary files that end in the .log extension via an HTTP request with a / (slash) in the Host: header.

Remediation

References

CVE-2001-0730

Related Vulnerabilities

WordPress Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2003-1599)

WordPress Plugin SEO Redirection-301 Redirect Manager SQL Injection (8.1)

Oracle Database Server CVE-2008-1819 Vulnerability (CVE-2008-1819)

Apache HTTP Server Improper Access Control Vulnerability (CVE-2016-4979)

CKEditor Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-17960)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2001-0730