{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated packages are now available for Red Hat Secure Web Server 3.2 (U.S.). \nThese updates close a potential security hole which would present clients\nwith a listing of the contents of a directory instead of the contents of an\nindex file or the proper error message.\n\nThe previous revision of this errata advisory included incorrect URLs. This\nrevision lists the correct location of the updated packages.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "By using a carefully constructed HTTP request, a server with\nmod_negotiation and either mod_dir or mod_autoindex loaded could be tricked\ninto displaying a listing of the contents of a directory, despite the\npresence of an index file.\n\nThe Common Vulnerabilities and Exposures project (cve.mitre.org) has\nassigned the names CAN-2001-0730, and CAN-2001-0731 to these issues.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2001:164",
        "url": "https://access.redhat.com/errata/RHSA-2001:164"
      },
      {
        "category": "external",
        "summary": "http://www.apacheweek.com/issues/01-10-05#security",
        "url": "http://www.apacheweek.com/issues/01-10-05#security"
      },
      {
        "category": "external",
        "summary": "http://httpd.apache.org/dist/httpd/CHANGES_1.3",
        "url": "http://httpd.apache.org/dist/httpd/CHANGES_1.3"
      },
      {
        "category": "external",
        "summary": "http://www.securityfocus.com/bid/3009",
        "url": "http://www.securityfocus.com/bid/3009"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2002/rhsa-2001_164.json"
      }
    ],
    "title": "Red Hat Security Advisory: : Updated secureweb packages available",
    "tracking": {
      "current_release_date": "2024-11-21T22:11:29+00:00",
      "generator": {
        "date": "2024-11-21T22:11:29+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2001:164",
      "initial_release_date": "2002-07-01T10:35:00+00:00",
      "revision_history": [
        {
          "date": "2002-07-01T10:35:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2001-12-05T00:00:00+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-21T22:11:29+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Secure Web Server 3.2",
                "product": {
                  "name": "Red Hat Secure Web Server 3.2",
                  "product_id": "Red Hat Secure Web Server 3.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:secure_web_server:3.2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Secure Web Server"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2001-0730",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1616611"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "split-logfile in Apache 1.3.20 allows remote attackers to overwrite arbitrary files that end in the .log extension via an HTTP request with a / (slash) in the Host: header.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Secure Web Server 3.2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2001-0730"
        },
        {
          "category": "external",
          "summary": "RHBZ#1616611",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1616611"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2001-0730",
          "url": "https://www.cve.org/CVERecord?id=CVE-2001-0730"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2001-0730",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2001-0730"
        }
      ],
      "release_date": "2001-09-28T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2002-07-01T10:35:00+00:00",
          "details": "The main secureweb package is provided as an rhmask file.  In order to\ngenerate the actual secureweb RPM package, you will need the\nsecureweb-3.2-12 package file from the Secure Web Server CD.  Then, using\nthe rhmask command, generate the secureweb RPM package:\n\nrhmask secureweb-3.2-12.i386.rpm secureweb-3.2.4-1.i386.rpm.rhmask\n\nBefore applying this update, make sure you have applied all previously\nreleased errata relevant to your system.\n\nTo update all RPMs for your particular architecture, run:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade.  Only those\nRPMs which are currently installed will be updated.  Those RPMs which are\nnot installed but included in the list will not be updated.  Note that you\ncan also use wildcards (*.rpm) if your current directory *only* contains\nthe desired RPMs.",
          "product_ids": [
            "Red Hat Secure Web Server 3.2"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2001:164"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "security flaw"
    },
    {
      "cve": "CVE-2001-0731",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1616612"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Apache 1.3.20 with Multiviews enabled allows remote attackers to view directory contents and bypass the index page via a URL containing the \"M=D\" query string.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Secure Web Server 3.2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2001-0731"
        },
        {
          "category": "external",
          "summary": "RHBZ#1616612",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1616612"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2001-0731",
          "url": "https://www.cve.org/CVERecord?id=CVE-2001-0731"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2001-0731",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2001-0731"
        }
      ],
      "release_date": "2001-07-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2002-07-01T10:35:00+00:00",
          "details": "The main secureweb package is provided as an rhmask file.  In order to\ngenerate the actual secureweb RPM package, you will need the\nsecureweb-3.2-12 package file from the Secure Web Server CD.  Then, using\nthe rhmask command, generate the secureweb RPM package:\n\nrhmask secureweb-3.2-12.i386.rpm secureweb-3.2.4-1.i386.rpm.rhmask\n\nBefore applying this update, make sure you have applied all previously\nreleased errata relevant to your system.\n\nTo update all RPMs for your particular architecture, run:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade.  Only those\nRPMs which are currently installed will be updated.  Those RPMs which are\nnot installed but included in the list will not be updated.  Note that you\ncan also use wildcards (*.rpm) if your current directory *only* contains\nthe desired RPMs.",
          "product_ids": [
            "Red Hat Secure Web Server 3.2"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2001:164"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "security flaw"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated Apache packages are now available for Red Hat Linux 6.2, 7, 7.1,\nand 7.2.  These packages upgrade the Apache Web server to version 1.3.22,\nwhich closes a potential security bug which would present clients with a\nlisting of the contents of a directory instead of the contents of an index\nfile, or in case of an error, the error message.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "By using a carefully constructed HTTP request, a server with\nmod_negotiation and either mod_dir or mod_autoindex loaded could be tricked\ninto displaying a listing of the contents of a directory, despite the\npresence of an index file.\n\nThe Common Vulnerabilities and Exposures project (cve.mitre.org) has\nassigned the names CAN-2001-0730, and CAN-2001-0731 to these\nissues.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2001:126",
        "url": "https://access.redhat.com/errata/RHSA-2001:126"
      },
      {
        "category": "external",
        "summary": "http://www.apacheweek.com/issues/01-10-05#security",
        "url": "http://www.apacheweek.com/issues/01-10-05#security"
      },
      {
        "category": "external",
        "summary": "http://httpd.apache.org/dist/httpd/CHANGES_1.3",
        "url": "http://httpd.apache.org/dist/httpd/CHANGES_1.3"
      },
      {
        "category": "external",
        "summary": "http://www.securityfocus.com/bid/3009",
        "url": "http://www.securityfocus.com/bid/3009"
      },
      {
        "category": "external",
        "summary": "34772",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=34772"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2001/rhsa-2001_126.json"
      }
    ],
    "title": "Red Hat Security Advisory: : Updated apache packages available",
    "tracking": {
      "current_release_date": "2024-11-21T22:11:25+00:00",
      "generator": {
        "date": "2024-11-21T22:11:25+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2001:126",
      "initial_release_date": "2001-12-04T22:29:00+00:00",
      "revision_history": [
        {
          "date": "2001-12-04T22:29:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2001-10-09T00:00:00+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-21T22:11:25+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Linux 6.2",
                "product": {
                  "name": "Red Hat Linux 6.2",
                  "product_id": "Red Hat Linux 6.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:linux:6.2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Linux 7.0",
                "product": {
                  "name": "Red Hat Linux 7.0",
                  "product_id": "Red Hat Linux 7.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:linux:7.0"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Linux 7.1",
                "product": {
                  "name": "Red Hat Linux 7.1",
                  "product_id": "Red Hat Linux 7.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:linux:7.1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Linux 7.2",
                "product": {
                  "name": "Red Hat Linux 7.2",
                  "product_id": "Red Hat Linux 7.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:linux:7.2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Linux"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2001-0730",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1616611"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "split-logfile in Apache 1.3.20 allows remote attackers to overwrite arbitrary files that end in the .log extension via an HTTP request with a / (slash) in the Host: header.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Linux 6.2",
          "Red Hat Linux 7.0",
          "Red Hat Linux 7.1",
          "Red Hat Linux 7.2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2001-0730"
        },
        {
          "category": "external",
          "summary": "RHBZ#1616611",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1616611"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2001-0730",
          "url": "https://www.cve.org/CVERecord?id=CVE-2001-0730"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2001-0730",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2001-0730"
        }
      ],
      "release_date": "2001-09-28T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2001-12-04T22:29:00+00:00",
          "details": "Note: The updated apache (and apache-devel) packages for Red Hat Linux 7,\n7.1, and 7.2 require installation of mm and expat (as well as mm-devel and\nexpat-devel for apache-devel).  Because mm and expat were not previously\nreleased for Red Hat Linux 7, and mm was not previously released for Red\nHat Linux 7.1, they will need to either be installed simultaneously with or\nbefore the apache packages.\n\nBefore applying this update, make sure all previously released errata\nrelevant to your system have been applied.  Users of Red Hat Linux 7 and\n7.1 will find that the mod_bandwidth, mod_put, and mod_throttle packages\nare now built as separate packages, and that they will need to manually\ninstall these packages as well.\n\nTo update all other RPMs for your particular architecture, run:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade.  Only those\nRPMs which are currently installed will be updated.  Those RPMs which are\nnot installed but included in the list will not be updated.  Note that you\ncan also use wildcards (*.rpm) if your current directory *only* contains\nthe desired RPMs.\n\nUsers of Red Hat Linux 7 will find that these updates enable the suexec\nfeature by default, which was not the case in previous versions of this\npackage.  Administrators who have configured their servers to run CGI\nscripts from user home directories should read the suexec documentation\nincluded in the apache-manual package.\n\nPlease note that this update is also available via Red Hat Network.  Many\npeople find this an easier way to apply updates.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "Red Hat Linux 6.2",
            "Red Hat Linux 7.0",
            "Red Hat Linux 7.1",
            "Red Hat Linux 7.2"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2001:126"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "security flaw"
    },
    {
      "cve": "CVE-2001-0731",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1616612"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Apache 1.3.20 with Multiviews enabled allows remote attackers to view directory contents and bypass the index page via a URL containing the \"M=D\" query string.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Linux 6.2",
          "Red Hat Linux 7.0",
          "Red Hat Linux 7.1",
          "Red Hat Linux 7.2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2001-0731"
        },
        {
          "category": "external",
          "summary": "RHBZ#1616612",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1616612"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2001-0731",
          "url": "https://www.cve.org/CVERecord?id=CVE-2001-0731"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2001-0731",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2001-0731"
        }
      ],
      "release_date": "2001-07-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2001-12-04T22:29:00+00:00",
          "details": "Note: The updated apache (and apache-devel) packages for Red Hat Linux 7,\n7.1, and 7.2 require installation of mm and expat (as well as mm-devel and\nexpat-devel for apache-devel).  Because mm and expat were not previously\nreleased for Red Hat Linux 7, and mm was not previously released for Red\nHat Linux 7.1, they will need to either be installed simultaneously with or\nbefore the apache packages.\n\nBefore applying this update, make sure all previously released errata\nrelevant to your system have been applied.  Users of Red Hat Linux 7 and\n7.1 will find that the mod_bandwidth, mod_put, and mod_throttle packages\nare now built as separate packages, and that they will need to manually\ninstall these packages as well.\n\nTo update all other RPMs for your particular architecture, run:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade.  Only those\nRPMs which are currently installed will be updated.  Those RPMs which are\nnot installed but included in the list will not be updated.  Note that you\ncan also use wildcards (*.rpm) if your current directory *only* contains\nthe desired RPMs.\n\nUsers of Red Hat Linux 7 will find that these updates enable the suexec\nfeature by default, which was not the case in previous versions of this\npackage.  Administrators who have configured their servers to run CGI\nscripts from user home directories should read the suexec documentation\nincluded in the apache-manual package.\n\nPlease note that this update is also available via Red Hat Network.  Many\npeople find this an easier way to apply updates.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "Red Hat Linux 6.2",
            "Red Hat Linux 7.0",
            "Red Hat Linux 7.1",
            "Red Hat Linux 7.2"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2001:126"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "security flaw"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2001-0730"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2001-10-30T05:00:00Z",
    "severity": "MODERATE"
  },
  "details": "split-logfile in Apache 1.3.20 allows remote attackers to overwrite arbitrary files that end in the .log extension via an HTTP request with a / (slash) in the Host: header.",
  "id": "GHSA-x7jp-wrv8-52h3",
  "modified": "2022-04-30T18:16:38Z",
  "published": "2022-04-30T18:16:38Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2001-0730"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/7419"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5@%3Ccvs.httpd.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920@%3Ccvs.httpd.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e@%3Ccvs.httpd.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9@%3Ccvs.httpd.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000430"
    },
    {
      "type": "WEB",
      "url": "http://frontal2.mandriva.com/security/advisories?name=MDKSA-2001:077"
    },
    {
      "type": "WEB",
      "url": "http://www.apacheweek.com/issues/01-09-28#security"
    },
    {
      "type": "WEB",
      "url": "http://www.linuxsecurity.com/advisories/other_advisory-1649.html"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2001-126.html"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2001-164.html"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

{
  "GSD": {
    "alias": "CVE-2001-0730",
    "description": "split-logfile in Apache 1.3.20 allows remote attackers to overwrite arbitrary files that end in the .log extension via an HTTP request with a / (slash) in the Host: header.",
    "id": "GSD-2001-0730",
    "references": [
      "https://access.redhat.com/errata/RHSA-2001:164",
      "https://access.redhat.com/errata/RHSA-2001:126"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2001-0730"
      ],
      "details": "split-logfile in Apache 1.3.20 allows remote attackers to overwrite arbitrary files that end in the .log extension via an HTTP request with a / (slash) in the Host: header.",
      "id": "GSD-2001-0730",
      "modified": "2023-12-13T01:19:01.615140Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2001-0730",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "split-logfile in Apache 1.3.20 allows remote attackers to overwrite arbitrary files that end in the .log extension via an HTTP request with a / (slash) in the Host: header."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "http://www.apacheweek.com/issues/01-09-28#security",
            "refsource": "CONFIRM",
            "url": "http://www.apacheweek.com/issues/01-09-28#security"
          },
          {
            "name": "RHSA-2001:164",
            "refsource": "REDHAT",
            "url": "http://www.redhat.com/support/errata/RHSA-2001-164.html"
          },
          {
            "name": "CLA-2001:430",
            "refsource": "CONECTIVA",
            "url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000430"
          },
          {
            "name": "ESA-20011019-01",
            "refsource": "ENGARDE",
            "url": "http://www.linuxsecurity.com/advisories/other_advisory-1649.html"
          },
          {
            "name": "MDKSA-2001:077",
            "refsource": "MANDRAKE",
            "url": "http://frontal2.mandriva.com/security/advisories?name=MDKSA-2001:077"
          },
          {
            "name": "RHSA-2001:126",
            "refsource": "REDHAT",
            "url": "http://www.redhat.com/support/errata/RHSA-2001-126.html"
          },
          {
            "name": "apache-log-file-overwrite(7419)",
            "refsource": "XF",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/7419"
          },
          {
            "name": "[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
            "refsource": "MLIST",
            "url": "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9@%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210330 svn commit: r1073140 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "refsource": "MLIST",
            "url": "https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5@%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
            "refsource": "MLIST",
            "url": "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920@%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210606 svn commit: r1075470 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "refsource": "MLIST",
            "url": "https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e@%3Ccvs.httpd.apache.org%3E"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:apache:http_server:1.3.20:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2001-0730"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "split-logfile in Apache 1.3.20 allows remote attackers to overwrite arbitrary files that end in the .log extension via an HTTP request with a / (slash) in the Host: header."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "NVD-CWE-Other"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.apacheweek.com/issues/01-09-28#security",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://www.apacheweek.com/issues/01-09-28#security"
            },
            {
              "name": "MDKSA-2001:077",
              "refsource": "MANDRAKE",
              "tags": [],
              "url": "http://frontal2.mandriva.com/security/advisories?name=MDKSA-2001:077"
            },
            {
              "name": "CLA-2001:430",
              "refsource": "CONECTIVA",
              "tags": [],
              "url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000430"
            },
            {
              "name": "ESA-20011019-01",
              "refsource": "ENGARDE",
              "tags": [],
              "url": "http://www.linuxsecurity.com/advisories/other_advisory-1649.html"
            },
            {
              "name": "RHSA-2001:126",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://www.redhat.com/support/errata/RHSA-2001-126.html"
            },
            {
              "name": "RHSA-2001:164",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://www.redhat.com/support/errata/RHSA-2001-164.html"
            },
            {
              "name": "apache-log-file-overwrite(7419)",
              "refsource": "XF",
              "tags": [],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/7419"
            },
            {
              "name": "[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
              "refsource": "MLIST",
              "tags": [],
              "url": "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-cvs] 20210330 svn commit: r1073140 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
              "refsource": "MLIST",
              "tags": [],
              "url": "https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
              "refsource": "MLIST",
              "tags": [],
              "url": "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-cvs] 20210606 svn commit: r1075470 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
              "refsource": "MLIST",
              "tags": [],
              "url": "https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e@%3Ccvs.httpd.apache.org%3E"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 5.0,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 2.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2021-06-06T11:15Z",
      "publishedDate": "2001-10-30T05:00Z"
    }
  }
}