CVE-2001-1013: Medium severity redhat linux vulnerability
Apache on Red Hat Linux with with the UserDir directive enabled generates different error codes when a username exists and there is no publichtml directory and when the username does not exist, which could allow remote attackers to determine valid usernames on the server.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2001-1013?
CVE-2001-1013 is considered a medium severity vulnerability due to its potential for user enumeration.
How do I fix CVE-2001-1013?
To fix CVE-2001-1013, administrators should disable the UserDir directive or implement access controls to obscure valid usernames.
What systems are affected by CVE-2001-1013?
CVE-2001-1013 specifically affects Apache servers running on Red Hat Linux 7.0 with the UserDir directive enabled.
What kind of attack does CVE-2001-1013 enable?
CVE-2001-1013 enables remote attackers to enumerate valid usernames on the server, increasing the risk of targeted attacks.
Is there a workaround for CVE-2001-1013?
A possible workaround for CVE-2001-1013 is to configure Apache to return the same error code regardless of username validity.