Security Advisory

CVE-2003-1138

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2005-05-10 04:00:00

Last updated 2024-09-16 20:59:00

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The default configuration of Apache 2.0.40, as shipped with Red Hat Linux 9.0, allows remote attackers to list directory contents, even if auto indexing is turned off and there is a default web page configured, via a GET request containing a double slash (//).

← Browse all CVEs View on cve.org ↗