Security Advisory

CVE-2000-1016

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2001-01-22 05:00:00
Last updated 2024-08-08 05:37:32
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

The default configuration of Apache (httpd.conf) on SuSE 6.4 includes an alias for the /usr/doc directory, which allows remote attackers to read package documentation and obtain system configuration information via an HTTP request for the /doc/packages URL.