The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbitrary directories via the PROPFIND HTTP request method.
Affected Software
Name |
Vendor |
Start Version |
End Version |
Http_server |
Apache |
1.3.12 (including) |
1.3.12 (including) |
References