CVE-2001-1449

Published: Nov 28, 2001Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The default installation of Apache before 1.3.19 on Mandrake Linux 7.1 through 8.0 and Linux Corporate Server 1.0.1 allows remote attackers to list the directory index of arbitrary web directories.

Affected (16)

Products: Apache: Http Server · Mandrakesoft: Mandrake Single Network Firewall, Mandrake Linux, Mandrake Linux Corporate Server

Apache

1 product

Http Server

Mandrakesoft

3 products

Mandrake Single Network Firewall

Mandrake Linux

Mandrake Linux Corporate Server

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Apache Http Server	Version 1.3.11
Apache Http Server	Version 1.3.12
Apache Http Server	Version 1.3.14
Apache Http Server	Version 1.3.17
Apache Http Server	Version 1.3.18
Apache Http Server	Version 1.3.1
Apache Http Server	Version 1.3.3
Apache Http Server	Version 1.3.4
Apache Http Server	Version 1.3.6
Apache Http Server	Version 1.3.9
Apache Http Server	Version 1.3
Mandrakesoft Mandrake Single Network Firewall	Version 7.2

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Mandrakesoft Mandrake Linux	Version 7.1
Mandrakesoft Mandrake Linux	Version 7.3
Mandrakesoft Mandrake Linux	Version 8.0
Mandrakesoft Mandrake Linux Corporate Server	Version 1.0.1

References (6)

http://www.kb.cert.org/vuls/id/913704

Source: cve@mitre.org

PatchUS Government Resource

http://www.mandriva.com/security/advisories?name=MDKSA-2001:077-2

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/8029

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/913704

Source: af854a3a-2127-422b-91ae-364da2661108

PatchUS Government Resource

http://www.mandriva.com/security/advisories?name=MDKSA-2001:077-2

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/8029

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.