CVE-2001-1342: Apache HTTP Server

Medium severity, CVSS 5.0. EPSS: 12% chance of exploitation in the next 30 days.

Apache before 1.3.20 on Windows and OS/2 systems allows remote attackers to cause a denial of service (GPF) via an HTTP request for a URI that contains a large number of / (slash) or other characters, which causes certain functions to dereference a null pointer.

Affected products

• Apache HTTP Server: version 1.3.12 only; version 1.3.14 only; version 1.3.15 only; version 1.3.16 only; version 1.3.17 only; version 1.3.18 only; …

Published 2001-05-12. Last modified 2026-06-16.