CVE-2000-0868 The default configuration of Apache 1.3.12 in SuSE Linux 6.4 allows remote attackers to read source code for CGI scripts by replacing the /cgi-bin/ in the requested URL with /cgi-bin-sdb/.
MediumCVSS 5.0
EPSS 44.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The default configuration of Apache 1.3.12 in SuSE Linux 6.4 allows remote attackers to read source code for CGI scripts by replacing the /cgi-bin/ in the requested URL with /cgi-bin-sdb/.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache HTTP Server | = 1.3.12 | No fix listed |
| suse linux | = 6.3 | No fix listed |
| suse linux | = 6.4 | No fix listed |
References
- 20000907 patch vendor-advisory
- A090700-2 patch vendor-advisory
- 1658 patch vdb-entry vendor-advisory
- suse-apache-cgi-source-code(5197) vdb-entry