Lucene search

[email protected]CVE-2000-0883

HistoryNov 14, 2000 - 5:00 a.m.

CVE-2000-0883

2000-11-1405:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2000-0883

apache

mod_perl

mandrake linux

directory browsing

information security

6.9 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.008 Low

EPSS

Percentile

81.3%

JSON

The default configuration of mod_perl for Apache as installed on Mandrake Linux 6.1 through 7.1 sets the /perl/ directory to be browseable, which allows remote attackers to list the contents of that directory.

CPENameOperatorVersion
mandrakesoft:mandrake_linuxmandrakesoft mandrake linuxeq7.0
mandrakesoft:mandrake_linuxmandrakesoft mandrake linuxeq7.1
mandrakesoft:mandrake_linuxmandrakesoft mandrake linuxeq6.1

CPE	Name	Operator	Version
mandrakesoft:mandrake_linux	mandrakesoft mandrake linux	eq	7.0
mandrakesoft:mandrake_linux	mandrakesoft mandrake linux	eq	7.1
mandrakesoft:mandrake_linux	mandrakesoft mandrake linux	eq	6.1

References

archives.neohapsis.com/archives/bugtraq/2000-09/0111.html

www.securityfocus.com/bid/1678

exchange.xforce.ibmcloud.com/vulnerabilities/5257

6.9 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.008 Low

EPSS

Percentile

81.3%

JSON

Related for CVE-2000-0883

nessus2