Description

Apache on MacOS X Client 10.0.3 with the HFS+ file system allows remote attackers to bypass access restrictions via a URL that contains some characters whose case is not matched by Apache's filters.

Remediation

References

CVE-2001-0766

Related Vulnerabilities

Apache HTTP Server Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2019-0217)

WordPress Plugin Slideshow Pro Arbitrary File Upload (2.4)

WordPress Plugin user files Arbitrary File Upload (2.4.2)

WordPress Plugin AppPresser-Mobile App Framework Security Bypass (4.3.2)

MySQL Other Vulnerability (CVE-2010-3683)

Severity

Critical

Classification

CVE-2001-0766 CWE-178 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities