CVE-2001-1013
- State
- Published
- Severity
- Not scored
- Published
- Feb 2, 2002
- Updated
- Aug 8, 2024
- Reserved
- Jan 31, 2002
Description
Apache on Red Hat Linux with with the UserDir directive enabled generates different error codes when a username exists and there is no public_html directory and when the username does not exist, which could allow remote attackers to determine valid usernames on the server.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 3335vdb-entry
- 20010912 Is there user Anna at your host ?mailing-list
- 20000707 Re: your mailmailing-list
- 20000707 (no subject)mailing-list
- linux-apache-username-exists(7129)vdb-entry
- 20000707 Re: apache and 404/404 status codesmailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.