Cross site scripting vulnerabilities in Apache 1.3.0 through 1.3.11 allow remote…
Priority MEDIUM 40CWE-79Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Medium
- Impact type
- Cross-site scripting
- Confidentiality · integrity · availability
- None · Partial · None
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-79.
Summary
Cross site scripting vulnerabilities in Apache 1.3.0 through 1.3.11 allow remote attackers to execute script as other web site visitors via (1) the printenv CGI (printenv.pl), which does not encode its output, (2) pages generated by the ap_send_error_response function such as a default 404, which does not add an explicit charset, or (3) various messages that are generated by certain Apache modules or core code. NOTE: the printenv issue might still exist for web browsers that can render text/plain content types as HTML, such as Internet Explorer, but CVE regards this as a design limitation of those browsers, not Apache. The printenv.pl/acuparam vector, discloser on 20070724, is one such variant.
Why it matters now
EPSS 0.23561 97th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 12
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:apache:http_server:1.3.0:*:*:*:*:*:*:* | 1.3.0 | Vulnerable | Apache |
| cpe:2.3:a:apache:http_server:1.3.1:*:*:*:*:*:*:* | 1.3.1 | Vulnerable | Apache |
| cpe:2.3:a:apache:http_server:1.3.2:*:*:*:*:*:*:* | 1.3.2 | Vulnerable | Apache |
| cpe:2.3:a:apache:http_server:1.3.3:*:*:*:*:*:*:* | 1.3.3 | Vulnerable | Apache |
| cpe:2.3:a:apache:http_server:1.3.4:*:*:*:*:*:*:* | 1.3.4 | Vulnerable | Apache |
| cpe:2.3:a:apache:http_server:1.3.5:*:*:*:*:*:*:* | 1.3.5 | Vulnerable | Apache |
| cpe:2.3:a:apache:http_server:1.3.6:*:*:*:*:*:*:* | 1.3.6 | Vulnerable | Apache |
| cpe:2.3:a:apache:http_server:1.3.7:*:*:*:*:*:*:* | 1.3.7 | Vulnerable | Apache |
| cpe:2.3:a:apache:http_server:1.3.8:*:*:*:*:*:*:* | 1.3.8 | Vulnerable | Apache |
| cpe:2.3:a:apache:http_server:1.3.9:*:*:*:*:*:*:* | 1.3.9 | Vulnerable | Apache |
- cpe:2.3:a:apache:http_server:1.3.0:*:*:*:*:*:*:* Versions 1.3.0 Vulnerable ·Apache
- cpe:2.3:a:apache:http_server:1.3.1:*:*:*:*:*:*:* Versions 1.3.1 Vulnerable ·Apache
- cpe:2.3:a:apache:http_server:1.3.2:*:*:*:*:*:*:* Versions 1.3.2 Vulnerable ·Apache
- cpe:2.3:a:apache:http_server:1.3.3:*:*:*:*:*:*:* Versions 1.3.3 Vulnerable ·Apache
- cpe:2.3:a:apache:http_server:1.3.4:*:*:*:*:*:*:* Versions 1.3.4 Vulnerable ·Apache
- cpe:2.3:a:apache:http_server:1.3.5:*:*:*:*:*:*:* Versions 1.3.5 Vulnerable ·Apache
- cpe:2.3:a:apache:http_server:1.3.6:*:*:*:*:*:*:* Versions 1.3.6 Vulnerable ·Apache
- cpe:2.3:a:apache:http_server:1.3.7:*:*:*:*:*:*:* Versions 1.3.7 Vulnerable ·Apache
- cpe:2.3:a:apache:http_server:1.3.8:*:*:*:*:*:*:* Versions 1.3.8 Vulnerable ·Apache
- cpe:2.3:a:apache:http_server:1.3.9:*:*:*:*:*:*:* Versions 1.3.9 Vulnerable ·Apache
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2000-1205
- 2026-10-03 Alias added: GHSA-qv5j-rh3g-jc8x
References
Other 8
- 20021222 'printenv' XSS vulnerability
- 20070724 printenv.pl(all versions) cross site scripting Vulnerability
- 20021223 Re: 'printenv' XSS vulnerability
- [httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/
- [httpd-cvs] 20210330 svn commit: r1073140 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html
- [httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/
- [httpd-cvs] 20210603 svn commit: r1075360 [1/3] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html
- [httpd-cvs] 20210606 svn commit: r1075470 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html
More Apache Http Server vulnerabilities
- TI-2021-18535 Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773) KEVCVSS 3.1CRITICAL 9.8
- TI-2021-18417 Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 KEVCVSS 3.1CRITICAL 9.8
- TI-2024-25716 Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path. KEVCVSS 3.1CRITICAL 9.1
- TI-2021-17490 mod_proxy SSRF KEVCVSS 3.1CRITICAL 9.0
- TI-2019-00184 Use after free in Apache HTTP Server KEVCVSS 3.1HIGH 7.8
- TI-2009-03392 The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft… CVSS 3.1CRITICAL 9.8
Sources
- CVE-2000-1205 · CVE Program
- CVE-2000-1205 · NVD
- FIRST EPSS
- GHSA-qv5j-rh3g-jc8x · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences