CVE-2000-1204: Apache HTTP Server

Medium severity, CVSS 5.0. EPSS: 10.4% chance of exploitation in the next 30 days.

Vulnerability in the mod_vhost_alias virtual hosting module for Apache 1.3.9, 1.3.11 and 1.3.12 allows remote attackers to obtain the source code for CGI programs if the cgi-bin directory is under the document root.

Affected products

• Apache HTTP Server: version 1.3.9 only; version 1.3.11 only; version 1.3.12 only

Published 2000-10-13. Last modified 2026-06-16.