NetSight
medium5.0

CVE-2001-0108

PHP Apache module 4.0.4 and earlier allows remote attackers to bypass .htaccess access restrictions via a malformed HTTP request on an unrestricted page that c…

Impact

PHP Apache module 4.0.4 and earlier allows remote attackers to bypass .htaccess access restrictions via a malformed HTTP request on an unrestricted page that causes PHP to use those access controls on the next page that is requested.

Affected products

VendorProductAffected versions
PhpPhp
Versions 4.0, 4.0.1, 4.0.3, 4.0.4
MandrakesoftMandrake Linux
Version 7.2

References