Vulnerability CVE-2001-1449
Published: 2001-11-28   Modified: 2012-02-12

Description:
The default installation of Apache before 1.3.19 on Mandrake Linux 7.1 through 8.0 and Linux Corporate Server 1.0.1 allows remote attackers to list the directory index of arbitrary web directories.

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
7.5/10
6.4/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial
Affected software
Mandrakesoft -> Mandrake single network firewall 
Mandrakesoft -> Mandrake linux 
Mandrakesoft -> Mandrake linux corporate server 
Apache -> Http server 

 References:
http://www.kb.cert.org/vuls/id/913704
http://www.mandriva.com/security/advisories?name=MDKSA-2001:077-2
https://exchange.xforce.ibmcloud.com/vulnerabilities/8029
Copyright 2024, cxsecurity.com

 

Back to Top