medium5.0
CVE-2000-0868
The default configuration of Apache 1.3.12 in SuSE Linux 6.4 allows remote attackers to read source code for CGI scripts by replacing the /cgi-bin/ in the requ…
Impact
The default configuration of Apache 1.3.12 in SuSE Linux 6.4 allows remote attackers to read source code for CGI scripts by replacing the /cgi-bin/ in the requested URL with /cgi-bin-sdb/.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apache | Http Server | Version 1.3.12 |
| Suse | Suse Linux | Versions 6.3, 6.4 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/linux/suse/2000-q3/0906.html
- http://www.atstake.com/research/advisories/2000/a090700-2.txt
- http://www.securityfocus.com/bid/1658
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5197
- http://archives.neohapsis.com/archives/linux/suse/2000-q3/0906.html
- http://www.atstake.com/research/advisories/2000/a090700-2.txt
- http://www.securityfocus.com/bid/1658
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5197