mod_rewrite in Apache 1.3.12 and earlier allows remote attackers to read arbitrary files if a RewriteRule directive is expanded to include a filename whose name contains a regular expression.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Http_server | Apache | 0.8.11 (including) | 0.8.11 (including) |
| Http_server | Apache | 0.8.14 (including) | 0.8.14 (including) |
| Http_server | Apache | 1.0 (including) | 1.0 (including) |
| Http_server | Apache | 1.0.2 (including) | 1.0.2 (including) |
| Http_server | Apache | 1.0.3 (including) | 1.0.3 (including) |
| Http_server | Apache | 1.0.5 (including) | 1.0.5 (including) |
| Http_server | Apache | 1.1 (including) | 1.1 (including) |
| Http_server | Apache | 1.1.1 (including) | 1.1.1 (including) |
| Http_server | Apache | 1.3.11 (including) | 1.3.11 (including) |
| Http_server | Apache | 1.3.12 (including) | 1.3.12 (including) |