CVE-2000-1016: Medium severity SUSE SuSE Linux vulnerability

Published Dec 11, 2000

Updated

The default configuration of Apache (httpd.conf) on SuSE 6.4 includes an alias for the /usr/doc directory, which allows remote attackers to read package documentation and obtain system configuration information via an HTTP request for the /doc/packages URL.

Affected Software

2 affected components

SUSE SuSE Linux=6.3

SUSE SuSE Linux=6.4

Remediation

Patch Available

http://www.securityfocus.com/bid/1707

Event History

Dec 11, 2000

CVE Published

05:00 AM

Jan 22, 2001

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2000-1016?

CVE-2000-1016 is considered a medium severity vulnerability due to potential information disclosure risks.

How do I fix CVE-2000-1016?

To fix CVE-2000-1016, you should remove or appropriately restrict the /usr/doc directory alias in the Apache configuration file.

Who is affected by CVE-2000-1016?

CVE-2000-1016 affects users running the default configuration of Apache on SuSE Linux versions 6.3 and 6.4.

What type of attack is possible with CVE-2000-1016?

CVE-2000-1016 allows remote attackers to read sensitive package documentation and system configuration information.

Is CVE-2000-1016 still a concern today?

CVE-2000-1016 is less of a concern for modern systems, but it remains relevant for any installations of outdated SuSE Linux.