CVE-2001-0042: Apache HTTP Server

Medium severity, CVSS 5.0. EPSS: 9.6% chance of exploitation in the next 30 days.

PHP 3.x (PHP3) on Apache 1.3.6 allows remote attackers to read arbitrary files via a modified .. (dot dot) attack containing "%5c" (encoded backslash) sequences.

Affected products

• Apache HTTP Server: version 1.3 only

Published 2001-02-16. Last modified 2026-06-16.