CVE-2003-0460: Apache HTTP Server

Medium severity, CVSS 5.0. EPSS: 13.4% chance of exploitation in the next 30 days.

The rotatelogs program on Apache before 1.3.28, for Windows and OS/2 systems, does not properly ignore certain control characters that are received over the pipe, which could allow remote attackers to cause a denial of service.

Affected products

• Apache HTTP Server: up to and including 1.3.27

Published 2003-08-27. Last modified 2026-06-16.