Lucene search

K
exploitpackKevinEXPLOITPACK:FC382902BBA7B2E0F32A5EBE2D4AD8D3
HistoryJul 10, 2001 - 12:00 a.m.

Apache 1.3 - Directory Index Disclosure

2001-07-1000:00:00
Kevin
6

Apache 1.3 - Directory Index Disclosure

source: https://www.securityfocus.com/bid/3009/info

A possible vulnerability exists in Apache that could cause directory contents to be disclosed when directory indexing is enabled, despite the presence of an 'index.html' file.

The problem is likely the result of an error in "multiview" functionality provided as part of Apache's content negotiation support. Exploitation of this problem may lead to the dislosure of sensitive information to attackers. 

http://target-webserver/?M=A
http://target-webserver/?S=D