CVE-2001-1342
Apache before 1.3.20 on Windows and OS/2 systems allows remote attackers to cause a denial of...
Apache before 1.3.20 on Windows and OS/2 systems allows remote attackers to cause a denial of service (GPF) via an HTTP request for a URI that contains a large number of / (slash) or other characters, which causes certain functions to dereference a null pointer.
Exploit likelihood
What each source reports
NVD Score used
Apache before 1.3.20 on Windows and OS/2 systems allows remote attackers to cause a denial of service (GPF) via an HTTP request for a URI that contains a large number of / (slash) or other characters, which causes certain functions to dereference a null pointer.
- Record
CVE-2001-1342- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Apache before 1.3.20 on Windows and OS/2 systems allows remote attackers to cause a denial of service (GPF) via an HTTP request for a URI that contains a large number of / (slash) or other characters, which causes certain functions to dereference a null pointer.
- Record
CVE-2001-1342- Updated
- 2026-11-02
EUVDEUVD-2001-1323 No score
Apache before 1.3.20 on Windows and OS/2 systems allows remote attackers to cause a denial of service (GPF) via an HTTP request for a URI that contains a large number of / (slash) or other characters, which causes certain functions to dereference a null pointer.
- Record
EUVD-2001-1323- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-p4g5-v5v5-p5mv No score
Apache before 1.3.20 on Windows and OS/2 systems allows remote attackers to cause a denial of...
Apache before 1.3.20 on Windows and OS/2 systems allows remote attackers to cause a denial of service (GPF) via an HTTP request for a URI that contains a large number of / (slash) or other characters, which causes certain functions to dereference a null pointer.
- Record
GHSA-p4g5-v5v5-p5mv- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2001-1342 is a medium vulnerability (CVSS 5.0) in Apache Http Server, published May 12, 2001. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 30.0%, the 98th percentile. No source names a fixed version.
References
iss.net/security_center/static/6527.php
securityfocus.com/bid/2740
apacheweek.com/issues/01-05-25
online.securityfocus.com/archive/1/176144
marc.info?l=bugtraq&m=99054258728748&w=2
bugs.apache.org/index.cgi/full/7522
Show 14 moreShow less
lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E
nvd.nist.gov/vuln/detail/CVE-2001-1342
github.com/advisories/GHSA-p4g5-v5v5-p5mv