Unscored CVE-2001-1072 EUVD-2001-1053GHSA-2vjr-23vj-3cq8

Apache with mod_rewrite enabled on most UNIX systems allows remote attackers to bypass RewriteRules by inserting extra / (slash) characters…

Published Jun 25, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

Apache with mod_rewrite enabled on most UNIX systems allows remote attackers to bypass RewriteRules by inserting extra / (slash) characters into the requested path, which causes the regular expression in the RewriteRule to fail.

References

http://www.apacheweek.com/issues/02-02-01#security
3176 vdb-entry
20010812 Are your mod_rewrite rules doing what you expect? mailing-list
apache-rewrite-bypass-directives(8633) vdb-entry