Vulnerability in Apache Http_server

CVE-2001-1449

The default installation of Apache before 1.3.19 on Mandrake Linux 7.1 through 8.0 and Linux Corporate Server 1.0.1 allows remote attackers to list the directory index of arbitrary web directories.

EPSS: 0.078 (93.9th percentile) — read the EPSS interpretation.

Affected products

Apache Http_server — versions 1.3, 1.3.1, 1.3.3
Mandrakesoft Mandrake_linux — versions 7.1, 7.3, 8.0
Mandrakesoft Mandrake_linux_corporate_server — versions 1.0.1
Mandrakesoft Mandrake_single_network_firewall — versions 7.2
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (vendor-advisory, x_refsource_MANDRAKE)
cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Patch, third-party-advisory)