CVE-2000-0869: Medium severity Apache HTTP Server vulnerability
Published Nov 14, 2000
·Updated
The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbitrary directories via the PROPFIND HTTP request method.
Affected Software
12 affected components
Apache HTTP Server=1.3.12
SUSE SuSE Linux=6.0
SUSE SuSE Linux=6.1
SUSE SuSE Linux=6.1-alpha
SUSE SuSE Linux=6.2
SUSE SuSE Linux=6.3
SUSE SuSE Linux=6.3
SUSE SuSE Linux=6.3-alpha
SUSE SuSE Linux=6.4
SUSE SuSE Linux=6.4
SUSE SuSE Linux=6.4-alpha
SUSE SuSE Linux=7.0
Remediation
Patch Available
Event History
Nov 14, 2000
CVE Published
05:00 AM
Jan 22, 2001
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2000-0869?
CVE-2000-0869 is considered a critical vulnerability as it allows remote attackers to list arbitrary directories.
2
How do I fix CVE-2000-0869?
To fix CVE-2000-0869, disable WebDAV in the Apache configuration or upgrade to a more secure version of Apache.
3
Which versions of Apache are affected by CVE-2000-0869?
Apache version 1.3.12 is specifically affected by CVE-2000-0869.
4
What operating systems are vulnerable to CVE-2000-0869?
CVE-2000-0869 affects various versions of SUSE Linux, specifically 6.0 to 7.0.
5
What attack vectors are associated with CVE-2000-0869?
The primary attack vector for CVE-2000-0869 is through sending PROPFIND HTTP requests to the Apache server.