PT-2000-1792 · Apache · Apache

Published 2000-11-14 · Updated 2017-10-10 · CVE-2000-0869

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apache version 1.3.12

Description The default configuration of Apache enables WebDAV, allowing remote attackers to list arbitrary directories via the PROPFIND HTTP request method.

Recommendations For Apache version 1.3.12, consider disabling WebDAV to prevent remote attackers from listing arbitrary directories. As a temporary workaround, restrict access to the PROPFIND HTTP request method until a more permanent solution is available.

Exploit

Fix

Related Identifiers

CVE-2000-0869

Affected Products

Apache

References · 7

• 🔥 http://securityfocus.com/bid/1656 · Exploit
• 🔥 https://exploit-db.com/exploits/20210 · Exploit
• http://archives.neohapsis.com/archives/linux/suse/2000-q3/0906.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2000-0869 · Security Note
• http://atstake.com/research/advisories/2000/a090700-3.txt · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0869 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5204 · Note