CVE-2001-0042

CVSS 5.0 - MEDIUM

Description

PHP 3.x (PHP3) on Apache 1.3.6 allows remote attackers to read arbitrary files via a modified .. (dot dot) attack containing "%5c" (encoded backslash) sequences.

Affected Products

Vendor	Product	Version
apache	http_server	`1.3`

References

http://www.securityfocus.com/archive/1/149210

http://www.securityfocus.com/bid/2060

https://exchange.xforce.ibmcloud.com/vulnerabiliti...

http://www.securityfocus.com/archive/1/149210

http://www.securityfocus.com/bid/2060

https://exchange.xforce.ibmcloud.com/vulnerabiliti...

Weakness Types

NVD-CWE-Other

CVE Information

CVE ID:: CVE-2001-0042
Published:: 2001-02-16
Modified:: 2026-04-16
CVSS Score:: 5.0
Severity:: MEDIUM
Vector:: AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected Vendors

apache

Quick Actions

View on NVD Find Similar CVEs

CVSS Severity Scale

0.0 - 3.9 LOW

4.0 - 6.9 MEDIUM

7.0 - 8.9 HIGH

9.0 - 10.0 CRITICAL