CVE-2000-0913: Apache HTTP Server

Medium severity, CVSS 5.0. EPSS: 35.6% chance of exploitation in the next 30 days.

mod_rewrite in Apache 1.3.12 and earlier allows remote attackers to read arbitrary files if a RewriteRule directive is expanded to include a filename whose name contains a regular expression.

Affected products

• Apache HTTP Server: version 0.8.11 only; version 0.8.14 only; version 1.0 only; version 1.0.2 only; version 1.0.3 only; version 1.0.5 only; …

Published 2000-12-19. Last modified 2026-09-23.