The Apache 1.3.x HTTP server for Windows platforms allows remote attackers to list directory contents by requesting a URL containing a large

Summary

The Apache 1.3.x HTTP server for Windows platforms allows remote attackers to list directory contents by requesting a URL containing a large number of / characters.

Timeline

1. May 31, 2000Public exploit on Exploit-DB

   EDB-19975

2. Oct 13, 2000, 4:00 AM UTCCVE published
3. Aug 8, 2024, 5:21 AM UTCRecord last updated
4. Oct 28, 2026EPSS reached 10%

   FIRST estimates at least a 10% chance of exploitation in the next 30 days

Affected versions

• n/a n/a

  Version range not reported

References 10