CVE-2001-0766: Apache HTTP Server

Critical severity, CVSS 9.8. EPSS: 8.2% chance of exploitation in the next 30 days.

Apache on MacOS X Client 10.0.3 with the HFS+ file system allows remote attackers to bypass access restrictions via a URL that contains some characters whose case is not matched by Apache's filters.

Affected products

• Apache HTTP Server: version 1.3.14 only

Published 2001-10-18. Last modified 2026-06-16.