PT-2000-1443 · Apache · Apache+1

Publicado

2000-05-31

·

Atualizado

2021-06-06

·

CVE-2000-0505

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Apache versions 1.3.x
Description The issue allows remote attackers to list directory contents by requesting a URL containing a large number of / characters. This security hole enables a user to view the listing of a directory instead of the default HTML page by sending a carefully constructed request.
Recommendations For Apache version 1.3.x, consider restricting access to directory listings until a patch is available. As a temporary workaround, avoid using URLs with a large number of / characters in requests to minimize the risk of exploitation.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2000-0505

Produtos afetados

Apache
Apache Http Server