Docview before 1.1-18 in Caldera OpenLinux 3.1.1, SCO Linux 4.0, OpenServer 5.0.7, configures the Apache web server in a way that allows remote attackers to read arbitrary publicly readable files via a certain URL, possibly related to rewrite rules.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Openlinux_server | Caldera | 3.1.1 (including) | 3.1.1 (including) |
| Openlinux_workstation | Caldera | 3.1.1 (including) | 3.1.1 (including) |
| Openserver | Caldera | 5.0.7 (including) | 5.0.7 (including) |