Skip to content
OpenAdvisories
Unscored CVE-2001-0131 EUVD-2001-0131GHSA-36m7-hm82-xm8q

htpasswd and htdigest in Apache 2.0a9, 1.3.14, and others allows local users to overwrite arbitrary files via a symlink attack.

Published Feb 14, 2001 · Updated Aug 8, 2024 · Assigned by mitre

Description

htpasswd and htdigest in Apache 2.0a9, 1.3.14, and others allows local users to overwrite arbitrary files via a symlink attack.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 3.0 apache 1.3.26-0woody DSA-187
Debian 3.0 apache-perl 1.3.26-1-1.26-0woody2 DSA-195
Debian 3.0 apache-ssl 1.3.26.1+1.48-0woody3 DSA-188

Advisories 3

References