CVE-2000-0868: Medium severity Apache HTTP Server vulnerability
Published Nov 14, 2000
·Updated
The default configuration of Apache 1.3.12 in SuSE Linux 6.4 allows remote attackers to read source code for CGI scripts by replacing the /cgi-bin/ in the requested URL with /cgi-bin-sdb/.
Affected Software
3 affected components
Apache HTTP Server=1.3.12
SUSE SuSE Linux=6.3
SUSE SuSE Linux=6.4
Remediation
Patch Available
Event History
Nov 14, 2000
CVE Published
05:00 AM
Jan 22, 2001
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2000-0868?
CVE-2000-0868 has a moderate severity rating as it allows remote attackers to access sensitive source code.
2
How do I fix CVE-2000-0868?
To fix CVE-2000-0868, you should adjust the Apache configuration to disable the exposure of source files.
3
What versions are affected by CVE-2000-0868?
CVE-2000-0868 affects Apache version 1.3.12 and specific versions of SUSE Linux, including 6.3 and 6.4.
4
Is CVE-2000-0868 still a concern today?
While CVE-2000-0868 is an older vulnerability, it can still pose risks if legacy systems are in use.
5
What type of attack is associated with CVE-2000-0868?
CVE-2000-0868 is associated with a path manipulation attack that allows unauthorized access to CGI script source code.