CVE-2000-1206: Apache HTTP Server

Medium severity, CVSS 5.0. EPSS: 5.3% chance of exploitation in the next 30 days.

Vulnerability in Apache httpd before 1.3.11, when configured for mass virtual hosting using mod_rewrite, or mod_vhost_alias in Apache 1.3.9, allows remote attackers to retrieve arbitrary files.

Affected products

• Apache HTTP Server: version 1.3.9 only; version 1.3.10 only

Published 1999-08-20. Last modified 2026-06-16.