Apache 1.3.20 with Multiviews enabled allows remote attackers to view directory contents and bypass the index page via a URL containing the

Summary

Apache 1.3.20 with Multiviews enabled allows remote attackers to view directory contents and bypass the index page via a URL containing the "M=D" query string.

Timeline

1. Jul 10, 2001Public exploit on Exploit-DB

   EDB-21002

2. Jun 25, 2002, 4:00 AM UTCCVE published
3. Aug 8, 2024, 4:30 AM UTCRecord last updated
4. Oct 28, 2026EPSS reached 10%

   FIRST estimates at least a 10% chance of exploitation in the next 30 days

Affected versions

• n/a n/a

  Version range not reported

References 14