CVE-2000-0505: Apache HTTP Server

Medium severity, CVSS 5.0. EPSS: 46.7% chance of exploitation in the next 30 days.

The Apache 1.3.x HTTP server for Windows platforms allows remote attackers to list directory contents by requesting a URL containing a large number of / characters.

Affected products

• Apache HTTP Server: version 1.3.6 only; version 1.3.9 only; version 1.3.11 only; version 1.3.12 only
• IBM HTTP Server: version 1.3.3 only; version 1.3.6.2 only

Published 2000-05-31. Last modified 2026-06-16.