A regression error in the Debian distributions of the apache-ssl package (prior to 1.3.9 on Debian 2.2, and prior to 1.3.26 on Debian 3.0), for Apache 1.3.27 and previous versions, allows local users to read or modify the Apache password file via a symlink attack on temporary files when the administrator runs (1) htpasswd or (2) htdigest, a re-introduction of a vulnerability that was originally identified and addressed by CVE-2001-0131.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
apache http server 1.3.20 |
||
apache http server 1.3.25 |
||
apache http server 1.3.19 |
||
apache http server 1.3.24 |
||
apache http server 1.3.17 |
||
apache http server 1.3.22 |
||
apache http server 1.3.26 |
||
apache http server 1.3.18 |
||
apache http server 1.3.23 |
||
apache http server 1.3.27 |
Vulmon