Vulnerability in Apache Http Server
CVE-2000-0868
The default configuration of Apache 1.3.12 in SuSE Linux 6.4 allows remote attackers to read source code for CGI scripts by replacing the /cgi-bin/ in the requested URL with /cgi-bin-sdb/.
EPSS: 0.447 (98.6th percentile) — read the EPSS interpretation.
Affected products
- Apache Http_server — versions 1.3.12
- Suse Suse_linux — versions 6.3, 6.4
- N/a — versions n/a
References
- cve@mitre.org (vendor-advisory, Patch, x_refsource_SUSE, Vendor Advisory)
- cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (x_refsource_ATSTAKE, vendor-advisory, Patch, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)