medium5.0Public exploit code
CVE-2000-1016
The default configuration of Apache (httpd.conf) on SuSE 6.4 includes an alias for the /usr/doc directory, which allows remote attackers to read package docume…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SuSE Linux 6.3/6.4 - Installed Package Disclosure2000-09-21 · remote · linux · Verified
Impact
The default configuration of Apache (httpd.conf) on SuSE 6.4 includes an alias for the /usr/doc directory, which allows remote attackers to read package documentation and obtain system configuration information via an HTTP request for the /doc/packages URL.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Suse | Suse Linux | Versions 6.3, 6.4 |
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/archive/1/84360
- http://www.securityfocus.com/bid/1707
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5276
- http://www.securityfocus.com/archive/1/84360
- http://www.securityfocus.com/bid/1707
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5276