Lucene search
+L

Debian 2.1 - HTTPd

🗓️ 17 Jun 1999 00:00:00Reported by anonymousType 
exploitdb
 exploitdb
🔗 www.exploit-db.com👁 110 Views

Debian 2.1 Apache exposes /usr/doc, allowing remote access to sensitive information.

Related
Code
ReporterTitlePublishedViews
Family
cgr
Chainguard
CVE-1999-0678 vulnerabilities
2 Feb 202613:17
cgr
circl
Circl
CVE-1999-0678
16 Dec 202521:00
circl
cve
CVE
CVE-1999-0678
22 Mar 200005:00
cve
cvelist
Cvelist
CVE-1999-0678
22 Mar 200005:00
cvelist
nessus
Tenable Nessus
/doc Directory Browsable (deprecated)
3 Jan 200000:00
nessus
nvd
NVD
CVE-1999-0678
17 Jan 199905:00
nvd
openvas
OpenVAS
/doc directory browsable
3 Nov 200500:00
openvas
osv
OSV
CGA-FW8V-J352-FR7X
29 Jan 202600:46
osv
osv
OSV
MINI-H4GH-4F46-28VM
29 May 202501:09
osv
redhatcve
RedhatCVE
CVE-1999-0678
7 Jan 202609:41
redhatcve
Rows per page
source: https://www.securityfocus.com/bid/318/info


The Debian GNU/Linux 2.1 apache package by default allows anyone to view /usr/doc via the web, remotely. This is because srm.conf is preconfigured with the line:

Alias /doc/ /usr/doc/

Boa is also preconfigured this way.


lynx http://some.host/doc

This will provide you with all of the information in /usr/doc, which could be used to find vulnerable software on the remote machine.

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2012 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 25
EPSS0.31408
110