CVE-2001-1449

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

The default installation of Apache before 1.3.19 on Mandrake Linux 7.1 through 8.0 and Linux Corporate Server 1.0.1 allows remote attackers to list the directory index of arbitrary web directories.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.kb.cert.org/vuls/id/913704Patch, US Government Resource
http://www.mandriva.com/security/advisories?name=MDKSA-2001:077-2
https://exchange.xforce.ibmcloud.com/vulnerabilities/8029
http://www.kb.cert.org/vuls/id/913704Patch, US Government Resource
http://www.mandriva.com/security/advisories?name=MDKSA-2001:077-2
https://exchange.xforce.ibmcloud.com/vulnerabilities/8029

Timeline

Published: Nov 28, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-14502.6Microsoft Internet Explorer 5.0 through 6.0 allows attackers to cause a denial of service (browser crash) via a crafted FTP URL such as "/.#CVE-2001-14515.0Memory leak in the SNMP LAN Manager (LANMAN) MIB extension for Microsoft Windows 2000 before SP3, when the Print Spooler is not running, all CVE-2001-14527.5By default, DNS servers on Windows NT 4.0 and Windows 2000 Server cache glue records received from non-delegated name servers, which allows CVE-2001-14537.5Buffer overflow in libmysqlclient.so in MySQL 3.23.33 and earlier allows remote attackers to execute arbitrary code via a long host paramete CVE-2001-14547.5Buffer overflow in MySQL before 3.23.33 allows remote attackers to execute arbitrary code via a long drop database request.CVE-2001-14557.5Netegrity SiteMinder 3.6 through 4.5.1 allows remote attackers to bypass filtering via URLs containing Unicode characters.CVE-2001-14567.5Buffer overflow in the (1) smap/smapd and (2) CSMAP daemons for Gauntlet Firewall 5.0 through 6.0 allows remote attackers to execute arbitra CVE-2001-14577.5Buffer overflow in CrazyWWWBoard 2000p4 and 2000LEp5 allows remote attackers to execute arbitrary code via a long HTTP_USER_AGENT CGI enviro CVE-2001-14585.0Directory traversal vulnerability in Novell GroupWise 5.5 and 6.0 allows remote attackers to read arbitrary files via a request for /servlet CVE-2001-14597.5OpenSSH 2.9 and earlier does not initiate a Pluggable Authentication Module (PAM) session if commands are executed with no pty, which allows CVE-2001-14607.5SQL injection vulnerability in article.php in PostNuke 0.62 through 0.64 allows remote attackers to bypass authentication via the user param CVE-2001-14617.5Directory traversal vulnerability in WebID in RSA Security SecurID 5.0 as used by ACE/Agent for Windows, Windows NT and Windows 2000 allows