medium5.0Public exploit code
CVE-2000-0869
The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbitrary directories via the PROPFIND HTTP …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Apache 1.3.12 - WebDAV Directory Listings2000-09-07 · remote · linux · Verified
Impact
The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbitrary directories via the PROPFIND HTTP request method.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apache | Http Server | Version 1.3.12 |
| Suse | Suse Linux | Versions 6.0, 6.1, 6.2, 6.3, 6.4, 7.0 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/linux/suse/2000-q3/0906.html
- http://www.atstake.com/research/advisories/2000/a090700-3.txt
- http://www.securityfocus.com/bid/1656
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5204
- http://archives.neohapsis.com/archives/linux/suse/2000-q3/0906.html
- http://www.atstake.com/research/advisories/2000/a090700-3.txt
- http://www.securityfocus.com/bid/1656
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5204