CVE-2001-1449 The default installation of Apache before 1.3.19 on Mandrake Linux 7.1 through 8.0 and Linux Corporate Server 1.0.1 allows remote attackers to list the directory index of arbitrary web directories.
HighCVSS 7.5
EPSS 7.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The default installation of Apache before 1.3.19 on Mandrake Linux 7.1 through 8.0 and Linux Corporate Server 1.0.1 allows remote attackers to list the directory index of arbitrary web directories.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache HTTP Server | = 1.3 | No fix listed |
| Apache HTTP Server | = 1.3.1 | No fix listed |
| Apache HTTP Server | = 1.3.3 | No fix listed |
| Apache HTTP Server | = 1.3.4 | No fix listed |
| Apache HTTP Server | = 1.3.6 | No fix listed |
| Apache HTTP Server | = 1.3.9 | No fix listed |
| Apache HTTP Server | = 1.3.11 | No fix listed |
| Apache HTTP Server | = 1.3.12 | No fix listed |
| Apache HTTP Server | = 1.3.14 | No fix listed |
| Apache HTTP Server | = 1.3.17 | No fix listed |
| Apache HTTP Server | = 1.3.18 | No fix listed |
| mandrakesoft mandrake single network firewall | = 7.2 | No fix listed |
| mandrakesoft mandrake linux | = 7.1 | No fix listed |
| mandrakesoft mandrake linux | = 7.3 | No fix listed |
| mandrakesoft mandrake linux | = 8.0 | No fix listed |
| mandrakesoft mandrake linux corporate server | = 1.0.1 | No fix listed |
References
- VU#913704 patch third-party-advisory us-government-resource
- MDKSA-2001:077 vendor-advisory
- mandrake-apache-browse-directories(8029) vdb-entry