Apache 1.3.20 with Multiviews enabled allows remote attackers to view directory contents and bypass the index page via a URL containing the M=D query string.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Http_server | Apache | 1.3.20 (including) | 1.3.20 (including) |
Red Hat Linux 6.2 | RedHat | * | |
Red Hat Linux 7.0 | RedHat | * | |
Red Hat Linux 7.1 | RedHat | * | |
Red Hat Linux 7.2 | RedHat | * | |
Red Hat Secure Web Server 3.2 | RedHat | * |