CVE-2001-0729: Apache HTTP Server

Medium severity, CVSS 5.0. EPSS: 6.8% chance of exploitation in the next 30 days.

Apache 1.3.20 on Windows servers allows remote attackers to bypass the default index page and list directory contents via a URL with a large number of / (slash) characters.

Affected products

• Apache HTTP Server: version 1.3.20 only

Published 2001-10-30. Last modified 2026-06-16.