CVE-2001-1013 Apache on Red Hat Linux with with the UserDir directive enabled generates different error codes when a username exists and there is no public_html directory and when the username does not exist, which...
MediumCVSS 5.0
EPSS 65.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Apache on Red Hat Linux with with the UserDir directive enabled generates different error codes when a username exists and there is no public_html directory and when the username does not exist, which could allow remote attackers to determine valid usernames on the server.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat linux | = 7.0 | No fix listed |
References
- 20000707 (no subject) mailing-list vendor-advisory
- 20000707 Re: apache and 404/404 status codes mailing-list
- 20000707 Re: your mail mailing-list vendor-advisory
- 20010912 Is there user Anna at your host ? mailing-list vendor-advisory
- 3335 exploit patch vdb-entry vendor-advisory
- linux-apache-username-exists(7129) vdb-entry