Description

Apache before 1.3.20 on Windows and OS/2 systems allows remote attackers to cause a denial of service (GPF) via an HTTP request for a URI that contains a large number of / (slash) or other characters, which causes certain functions to dereference a null pointer.

Remediation

References

CVE-2001-1342

Related Vulnerabilities

ATutor Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-23341)

WordPress 3.7.x Multiple Vulnerabilities (3.7 - 3.7.29)

WordPress Plugin CMS Commander Client PHP Object Injection (2.21)

WordPress Improper Authentication Vulnerability (CVE-2022-43504)

Oracle Database Server CVE-2011-0876 Vulnerability (CVE-2011-0876)

Severity

Medium

Classification

CVE-2001-1342

Tags

Missing Update Known Vulnerabilities