CVE-2000-0868

Description

The default configuration of Apache 1.3.12 in SuSE Linux 6.4 allows remote attackers to read source code for CGI scripts by replacing the /cgi-bin/ in the requested URL with /cgi-bin-sdb/.

Affected products

• apache / http_server1.3.12 – 1.3.12
• SUSE / suse_linux6.3 – 6.3
• SUSE / suse_linux6.4 – 6.4

References

• MISChttp://archives.neohapsis.com/archives/linux/suse/2000-q3/0906.html
• MISChttp://www.securityfocus.com/bid/1658
• VENDOR_ADVISORYhttp://www.atstake.com/research/advisories/2000/a090700-2.txt
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/5197