CVE-2001-1072: Apache HTTP Server

Medium severity, CVSS 5.0. EPSS: 4.3% chance of exploitation in the next 30 days.

Apache with mod_rewrite enabled on most UNIX systems allows remote attackers to bypass RewriteRules by inserting extra / (slash) characters into the requested path, which causes the regular expression in the RewriteRule to fail.

Affected products

• Apache HTTP Server: version 1.3.14 only; version 1.3.17 only; version 1.3.19 only

Published 2001-08-31. Last modified 2026-06-16.