CVE-2004-2343

Apache HTTP Server 2.0.47 and earlier allows local users to bypass .htaccess file restrictions, as specified in httpd.conf with directives such as Deny From…

published August 16, 2005

CVSS
—
EPSS
1%
Percentile
48.0
In the wild
Unconfirmed
What it is

Apache HTTP Server 2.0.47 and earlier allows local users to bypass .htaccess file restrictions, as specified in httpd.conf with directives such as Deny From All, by using an ErrorDocument directive. NOTE: the vendor has disputed this issue, since the .htaccess mechanism is only intended to restrict external web access, and a local user already has the privileges to perform the same operations without using ErrorDocument

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00604 · 48.0th percentile
Published
2005-08-16T04:00Z
EPSS history
Timeline
  • 16 AUG 04:00Z
    Apache HTTP Server 2.0.47 and earlier allows local users to bypass .htaccess file restrictions, as specified in httpd.conf with directives such as Deny From…
    cvelistv5