Description

The default configuration of Apache 1.3.12 in SuSE Linux 6.4 allows remote attackers to read source code for CGI scripts by replacing the /cgi-bin/ in the requested URL with /cgi-bin-sdb/.

Remediation

References

CVE-2000-0868

Related Vulnerabilities

Wordpress Plugin Backup Migration Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2023-7002)

MySQL CVE-2022-21332 Vulnerability (CVE-2022-21332)

Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-6299)

Python Numeric Errors Vulnerability (CVE-2008-5031)

WordPress Plugin TC Custom JavaScript Cross-Site Scripting (1.2.1)

Severity

Medium

Classification

CVE-2000-0868

Tags

Missing Update Known Vulnerabilities