CVE-2001-0730: Apache HTTP Server

Medium severity, CVSS 5.0. EPSS: 11.9% chance of exploitation in the next 30 days.

split-logfile in Apache 1.3.20 allows remote attackers to overwrite arbitrary files that end in the .log extension via an HTTP request with a / (slash) in the Host: header.

Affected products

• Apache HTTP Server: version 1.3.20 only

Published 2001-10-30. Last modified 2026-06-16.