The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbitrary directories via the PROPFIND HTTP request method.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/1656 | Exploit Patch Vendor Advisory |
http://archives.neohapsis.com/archives/linux/suse/2000-q3/0906.html | Vendor Advisory |
http://www.atstake.com/research/advisories/2000/a090700-3.txt | Vendor Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/5204 |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Information
Published : 2000-11-13 21:00
Updated : 2017-10-09 18:29
NVD link : CVE-2000-0869
Mitre link : CVE-2000-0869
JSON object : View
CWE
Products Affected
apache
- http_server
suse
- suse_linux