CVE-2000-1206

Medium

Published: 20/08/1999(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

5.31%

92th percentile - higher than 92% of all known CVEs

Summary

Vulnerability in Apache httpd before 1.3.11, when configured for mass virtual hosting using mod_rewrite or mod_vhost_alias in Apache 1.3.9, allows remote attackers to retrieve arbitrary files.

Risk Assessment

Attackers may gain access to sensitive data on the server, potentially leading to serious security breaches.

Recommendation

It is recommended to upgrade Apache httpd to version 1.3.11 or later and review the configuration of mass virtual hosting.

Original NVD description (English source)

Vulnerability in Apache httpd before 1.3.11, when configured for mass virtual hosting using mod_rewrite, or mod_vhost_alias in Apache 1.3.9, allows remote attackers to retrieve arbitrary files.