Lucene search

K
httpdApache Team FoundationHTTPD:DBAC2C1E874639473FE5C251DB57C369
HistoryOct 13, 2000 - 12:00 a.m.

Apache Httpd < 1.3.14 : Mass virtual hosting can display CGI source

2000-10-1300:00:00
Apache Team Foundation
httpd.apache.org
10

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.004 Low

EPSS

Percentile

73.2%

A security problem for users of the mass virtual hosting module, mod_vhost_alias, causes the source to a CGI to be sent if the cgi-bin directory is under the document root. However, it is not normal to have your cgi-bin directory under a document root.

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.004 Low

EPSS

Percentile

73.2%

Related for HTTPD:DBAC2C1E874639473FE5C251DB57C369