PT-2000-1792 · Apache · Apache

Publicado 2000-11-14 · Atualizado 2017-10-10 · CVE-2000-0869

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apache version 1.3.12

Description The default configuration of Apache enables WebDAV, allowing remote attackers to list arbitrary directories via the PROPFIND HTTP request method.

Recommendations For Apache version 1.3.12, consider disabling WebDAV to prevent remote attackers from listing arbitrary directories. As a temporary workaround, restrict access to the PROPFIND HTTP request method until a more permanent solution is available.

Exploit

Correção

Identificadores relacionados

CVE-2000-0869

Produtos afetados

Apache

Referências · 7

• 🔥 http://securityfocus.com/bid/1656 · Exploit
• 🔥 https://exploit-db.com/exploits/20210 · Exploit
• http://archives.neohapsis.com/archives/linux/suse/2000-q3/0906.html · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0869 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5204 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2000-0869 · Nota de Segurança
• http://atstake.com/research/advisories/2000/a090700-3.txt · Aviso do Fabricante