CVE-2001-1013

Apache on Red Hat Linux with with the UserDir directive enabled generates different error codes when a username exists and there is no public_html directory and when the username does not exist, which could allow remote attackers to determine valid usernames on the server.
Configurations

Configuration 1 (hide)

cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*

History

20 Nov 2024, 23:36

Type Values Removed Values Added
References () http://archives.neohapsis.com/archives/vuln-dev/2000-q3/0083.html - Vendor Advisory () http://archives.neohapsis.com/archives/vuln-dev/2000-q3/0083.html - Vendor Advisory
References () http://archives.neohapsis.com/archives/vuln-dev/2000-q3/0087.html - () http://archives.neohapsis.com/archives/vuln-dev/2000-q3/0087.html -
References () http://archives.neohapsis.com/archives/vuln-dev/2000-q3/0094.html - Vendor Advisory () http://archives.neohapsis.com/archives/vuln-dev/2000-q3/0094.html - Vendor Advisory
References () http://www.securityfocus.com/archive/1/213667 - Vendor Advisory () http://www.securityfocus.com/archive/1/213667 - Vendor Advisory
References () http://www.securityfocus.com/bid/3335 - Exploit, Patch, Vendor Advisory () http://www.securityfocus.com/bid/3335 - Exploit, Patch, Vendor Advisory
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/7129 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/7129 -

Information

Published : 2001-09-12 04:00

Updated : 2024-11-20 23:36


NVD link : CVE-2001-1013

Mitre link : CVE-2001-1013

CVE.ORG link : CVE-2001-1013


JSON object : View

Products Affected

redhat

  • linux