CVE-2000-0505

Medium

Published: 31/05/2000(UTC)Updated: 16/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

46.65%

99th percentile - higher than 99% of all known CVEs

Summary

The Apache 1.3.x HTTP server for Windows platforms allows remote attackers to list directory contents by requesting a URL containing a large number of / characters.

Risk Assessment

Attackers may gain access to sensitive information located in server directories, potentially leading to further attacks on the system.

Recommendation

It is recommended to limit the number of allowed '/' characters in URL requests and to update the server to a newer version to minimize risk.

Original NVD description (English source)

The Apache 1.3.x HTTP server for Windows platforms allows remote attackers to list directory contents by requesting a URL containing a large number of / characters.