CVE-2000-0869

Опубликовано: 14 нояб. 2000

Источник: nvd

CVSS2: 5

EPSS Средний

Описание

The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbitrary directories via the PROPFIND HTTP request method.

Ссылки

http://archives.neohapsis.com/archives/linux/suse/2000-q3/0906.html
Vendor Advisory
http://www.atstake.com/research/advisories/2000/a090700-3.txt
Vendor Advisory
http://www.securityfocus.com/bid/1656
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5204
http://archives.neohapsis.com/archives/linux/suse/2000-q3/0906.html
Vendor Advisory
http://www.atstake.com/research/advisories/2000/a090700-3.txt
Vendor Advisory
http://www.securityfocus.com/bid/1656
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5204

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:apache:http_server:1.3.12:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:suse:suse_linux:6.0:*:*:*:*:*:*:*

cpe:2.3:o:suse:suse_linux:6.1:*:*:*:*:*:*:*

cpe:2.3:o:suse:suse_linux:6.1:alpha:*:*:*:*:*:*

cpe:2.3:o:suse:suse_linux:6.2:*:*:*:*:*:*:*

cpe:2.3:o:suse:suse_linux:6.3:*:*:*:*:*:*:*

cpe:2.3:o:suse:suse_linux:6.3:*:ppc:*:*:*:*:*

cpe:2.3:o:suse:suse_linux:6.3:alpha:*:*:*:*:*:*

cpe:2.3:o:suse:suse_linux:6.4:*:*:*:*:*:*:*

cpe:2.3:o:suse:suse_linux:6.4:*:ppc:*:*:*:*:*

cpe:2.3:o:suse:suse_linux:6.4:alpha:*:*:*:*:*:*

cpe:2.3:o:suse:suse_linux:7.0:*:*:*:*:*:*:*

EPSS

Процентиль: 93%

0.10568

Средний

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-7g2r-9q3g-84p3

github

почти 4 года назад