CVE-2000-0869

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbitrary directories via the PROPFIND HTTP request method.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/linux/suse/2000-q3/0906.htmlVendor Advisory
http://www.atstake.com/research/advisories/2000/a090700-3.txtVendor Advisory
http://www.securityfocus.com/bid/1656Exploit, Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5204
http://archives.neohapsis.com/archives/linux/suse/2000-q3/0906.htmlVendor Advisory
http://www.atstake.com/research/advisories/2000/a090700-3.txtVendor Advisory
http://www.securityfocus.com/bid/1656Exploit, Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5204

Timeline

Published: Nov 14, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-08707.5Buffer overflow in EFTP allows remote attackers to cause a denial of service via a long string.CVE-2000-08715.0Buffer overflow in EFTP allows remote attackers to cause a denial of service by sending a string that does not contain a newline, then disco CVE-2000-08725.0explorer.php in PhotoAlbum 0.9.9 allows remote attackers to read arbitrary files via a .. (dot dot) attack.CVE-2000-08732.1netstat in AIX 4.x.x does not properly restrict access to the -Zi option, which allows local users to clear network interface statistics and CVE-2000-08745.0Eudora mail client includes the absolute path of the sender's host within a virtual card (VCF).CVE-2000-08755.0WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to cause a denial of service by sending a long string of unprintable characters.CVE-2000-08765.0WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to obtain the full pathname of the server via a "%C" command, which generates an erro CVE-2000-08775.0mailform.pl CGI script in MailForm 2.0 allows remote attackers to read arbitrary files by specifying the file name in the XX-attach_file par CVE-2000-08787.5The mailto CGI script allows remote attacker to execute arbitrary commands via shell metacharacters in the emailadd form field.CVE-2000-08792.1LPPlus programs dccsched, dcclpdser, dccbkst, dccshut, dcclpdshut, and dccbkstshut are installed setuid root and world executable, which all CVE-2000-08803.6LPPlus creates the lpdprocess file with world-writeable permissions, which allows local users to kill arbitrary processes by specifying an a CVE-2000-08812.1The dccscan setuid program in LPPlus does not properly check if the user has the permissions to print the file that is specified to dccscan,