CVE-2001-0131: Apache HTTP Server

Low severity, CVSS 3.3. EPSS: 2.3% chance of exploitation in the next 30 days.

htpasswd and htdigest in Apache 2.0a9, 1.3.14, and others allows local users to overwrite arbitrary files via a symlink attack.

Affected products

• Apache HTTP Server: version 1.3.14 only; version 2.0 only
• Debian Debian Linux: version 2.2 only

Published 2001-03-12. Last modified 2026-06-16.