CVE

Id
3817  
CVE No.
CVE-2001-1013  
Status
Candidate  
Description
Apache on Red Hat Linux with with the UserDir directive enabled generates different error codes when a username exists and there is no public_html directory and when the username does not exist, which could allow remote attackers to determine valid usernames on the server.  
Phase
Proposed (20020131)  
Votes
ACCEPT(3) Cole, Frech, Green | MODIFY(2) Cox, Foat | REVIEWING(1) Wall  
Comments
CHANGE> [Foat changed vote from REVIEWING to MODIFY] | Foat> This is only true if "indexes" are NOT enabled and the | "public_html" directory exists for the user. | Cox> The description says "Apache on Red Hat Linux". This issue | affects all versions of Apache that have UserDir enabled, not just | Linux or RHL. In Red Hat Linux we enable UserDir by default, but so | do other distributions.  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
17376 3817 CVE-2001-1013 VULN-DEV:20000707 (no subject)  View
17377 3817 CVE-2001-1013 URL:http://archives.neohapsis.com/archives/vuln-dev/2000-q3/0083.html  View
17378 3817 CVE-2001-1013 VULN-DEV:20000707 Re: your mail  View
17379 3817 CVE-2001-1013 URL:http://archives.neohapsis.com/archives/vuln-dev/2000-q3/0094.html  View
17380 3817 CVE-2001-1013 VULN-DEV:20000707 Re: apache and 404/404 status codes  View
17381 3817 CVE-2001-1013 URL:http://archives.neohapsis.com/archives/vuln-dev/2000-q3/0087.html  View
17382 3817 CVE-2001-1013 BUGTRAQ:20010912 Is there user Anna at your host ?  View
17383 3817 CVE-2001-1013 URL:http://www.securityfocus.com/archive/1/213667  View
17384 3817 CVE-2001-1013 XF:linux-apache-username-exists(7129)  View
17385 3817 CVE-2001-1013 URL:http://xforce.iss.net/static/7129.php  View
17386 3817 CVE-2001-1013 BID:3335  View

Related JVN