Description

Apache 2.0 before 2.0.44 on Windows platforms allows remote attackers to obtain certain files via an HTTP request that ends in certain illegal characters such as ">", which causes a different filename to be processed and served.

Remediation

References

CVE-2003-0017

Related Vulnerabilities

WordPress Plugin YITH WooCommerce Subscription Security Bypass (1.3.4)

Jboss EAP Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-9517)

WordPress Plugin Portfolio Gallery-Photo Gallery Unspecified Vulnerability (2.3.0)

WordPress Plugin NextScripts:Social Networks Auto-Poster Unspecified Vulnerability (4.3.2)

TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-32768)

Severity

Medium

Classification

CVE-2003-0017

Tags

Missing Update Known Vulnerabilities