CVE-2000-1204: Medium severity Apache HTTP Server vulnerability
Vulnerability in the modvhostalias virtual hosting module for Apache 1.3.9, 1.3.11 and 1.3.12 allows remote attackers to obtain the source code for CGI programs if the cgi-bin directory is under the document root.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2000-1204?
CVE-2000-1204 is considered a high severity vulnerability due to its potential for exposing sensitive CGI source code to remote attackers.
How do I fix CVE-2000-1204?
To fix CVE-2000-1204, upgrade Apache HTTP Server to a version later than 1.3.12 that does not include this vulnerability.
Which versions of Apache are affected by CVE-2000-1204?
CVE-2000-1204 affects Apache HTTP Server versions 1.3.9, 1.3.11, and 1.3.12.
What type of attack is possible through CVE-2000-1204?
CVE-2000-1204 allows remote attackers to execute a source code disclosure attack, potentially revealing sensitive information.
Is there a workaround for CVE-2000-1204 if I cannot upgrade?
A workaround for CVE-2000-1204 is to ensure that the cgi-bin directory is not located within the document root to prevent exposure.