CVE-2001-0108

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

PHP Apache module 4.0.4 and earlier allows remote attackers to bypass .htaccess access restrictions via a malformed HTTP request on an unrestricted page that causes PHP to use those access controls on the next page that is requested.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Mar 12, 2001
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2001

CVE-2001-01091.2rctab in SuSE 7.0 and earlier allows local users to create or overwrite arbitrary files via a symlink attack on the rctmp temporary file.CVE-2001-01107.2Buffer overflow in jaZip Zip/Jaz drive manager allows local users to gain root privileges via a long DISPLAY environmental variable.CVE-2001-01117.2Format string vulnerability in splitvt before 1.6.5 allows local users to execute arbitrary commands via the -rcfile command line argument.CVE-2001-01127.2Multiple buffer overflows in splitvt before 1.6.5 allow local users to execute arbitrary commands.CVE-2001-011310.0statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to execute arbitrary commands via the mostbrowsers parameter, whose value is used aCVE-2001-01145.0statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to overwrite arbitrary files via the cgidir parameter.CVE-2001-01157.2Buffer overflow in arp command in Solaris 7 and earlier allows local users to execute arbitrary commands via a long -f parameter.CVE-2001-01161.2gpm 1.19.3 allows local users to overwrite arbitrary files via a symlink attack.CVE-2001-01171.2sdiff 2.7 in the diffutils package allows local users to overwrite files via a symlink attack.CVE-2001-01181.2rdist 6.1.5 allows local users to overwrite arbitrary files via a symlink attack.CVE-2001-01191.2getty_ps 2.0.7j allows local users to overwrite arbitrary files via a symlink attack.CVE-2001-01201.2useradd program in shadow-utils program may allow local users to overwrite arbitrary files via a symlink attack.
CVE-2001-0108: Medium severity, CVSS 5.0 | Vulnix