An off-by-one flaw exists in the Rewrite module, mod_rewrite, as shipped with Apache 1.3 since 1.3.28, 2.0 since 2.0.46, and 2.2 since 2.2.0.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/48765/apacheRewrite.txt
Source: https://packetstormsecurity.com/files/48765/apacheRewrite.txt.html