CVE-2003-0017: Apache 2.0 before 2.0.44 on Windows platforms allows remote attackers to obtain certain files via an HTTP r...

Apache 2.0 before 2.0.44 on Windows platforms allows remote attackers to obtain certain files via an HTTP request that ends in certain illegal characters such as ">", which causes a different filename to be processed and served.

UnknownCVSS not scoredNot KEV-listedUpdatedAug 8, 2024, 01:36 UTC (UTC+00:00)

Analyst readout for executives and security teams

Plain-English summary

CVE-2003-0017 is an old Apache HTTP Server issue affecting Apache 2.0 before 2.0.44 on Windows. A remote HTTP request ending with certain illegal characters could cause Apache to process and serve a different file than intended, creating a file disclosure risk.

Executive priority

Treat this as a legacy hygiene issue unless an affected Windows Apache 2.0 server is still internet-facing. If found, remediate promptly because the impact is unauthorized file disclosure, even though current exploitation evidence is not provided.

Technical view

On Windows platforms, Apache 2.0 before 2.0.44 mishandled HTTP requests whose filenames ended in illegal characters such as ">". The parsing mismatch could result in another filename being resolved and returned. The provided sources do not include CVSS, CWE, or detailed affected CPE data.

Likely exposure

Exposure is most plausible on legacy Windows servers still running Apache HTTP Server 2.0 earlier than 2.0.44. Modern Apache deployments are unlikely to be affected unless obsolete binaries remain in use.

Exploitation context

The bundle does not show CISA KEV listing or any cited evidence of active exploitation. It describes a remote file disclosure condition, but does not provide exploit prevalence, exploit maturity, or confirmed real-world abuse.

Researcher notes

Key gaps are severity scoring, CWE mapping, precise file scope, and exploitation evidence. Analysis should stay anchored to Apache 2.0 before 2.0.44 on Windows and avoid broad assumptions about other Apache branches or platforms.

Mitigation direction

Inventory Windows hosts running Apache HTTP Server 2.0.
Upgrade any Apache 2.0 version earlier than 2.0.44.
Check Apache vendor advisories before selecting compensating controls.
Retire unsupported Apache 2.0 deployments where upgrade is impractical.
Restrict public exposure for legacy web servers during remediation.

Validation and detection

Confirm Apache version and operating system for each web server.
Prioritize any Windows Apache 2.0 installation below 2.0.44.
Review HTTP access logs for malformed filename requests.
Verify web roots do not contain sensitive recoverable files.
Document systems found unaffected due to platform or version.

Prepared: Jun 30, 2026, 03:02 UTC (UTC+00:00)
Confidence: medium
Sources: 4

Public sources used

Based on public source material and reviewed before publication.

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

cve · low confidence lookup

CVE-2003-0017 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup

Vulnerability profileCVE Program record

Severity: Unknown
CVSS: Not scored
Known Exploited: No
Published: Sep 1, 2004, 04:00 UTC (UTC+00:00)

Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

0CVSS vectors

0Timeline events

0ADP providers

16Source links

CVSS and timeline data

No CVSS vectors or timeline events were available in the normalized CVE source material.

Source materials

CVE List V5 sourceCVE List V5
http://marc.info/?l=apache-httpd-announce&m=104313442901017&w=2CVE reference · x_refsource_CONFIRM
[httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlCVE reference · mailing-list, x_refsource_MLIST
[httpd-cvs] 20190815 svn commit: r1048743 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlCVE reference · mailing-list, x_refsource_MLIST
[httpd-cvs] 20200401 svn commit: r1058586 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlCVE reference · mailing-list, x_refsource_MLIST
[httpd-cvs] 20200401 svn commit: r1058587 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlCVE reference · mailing-list, x_refsource_MLIST
[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE reference · mailing-list, x_refsource_MLIST
[httpd-cvs] 20210330 svn commit: r1073139 [2/13] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE reference · mailing-list, x_refsource_MLIST
[httpd-cvs] 20210330 svn commit: r1888194 [2/13] - /httpd/site/trunk/content/security/json/CVE reference · mailing-list, x_refsource_MLIST
[httpd-cvs] 20210330 svn commit: r1073140 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlCVE reference · mailing-list, x_refsource_MLIST
[httpd-cvs] 20210330 svn commit: r1073143 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/CVE reference · mailing-list, x_refsource_MLIST
[httpd-cvs] 20210330 svn commit: r1073149 [2/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/CVE reference · mailing-list, x_refsource_MLIST
[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/CVE reference · mailing-list, x_refsource_MLIST
[httpd-cvs] 20210603 svn commit: r1075360 [1/3] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlCVE reference · mailing-list, x_refsource_MLIST
[httpd-cvs] 20210606 svn commit: r1075467 [1/2] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlCVE reference · mailing-list, x_refsource_MLIST
[httpd-cvs] 20210606 svn commit: r1075470 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlCVE reference · mailing-list, x_refsource_MLIST

Affected products

Products and packages named in the record

VendorProductVersion / packageStatus

n/an/an/aListed

Weakness

CWE details

No CWE listed

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.