Apache on Red Hat Linux with with the UserDir directive enabled generates different error codes when a username exists and there is no public_html directory and when the username does not exist, which could allow remote attackers to determine valid usernames on the server.
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2002-02-02T05:00:00

Updated: 2017-12-18T21:57:01

Reserved: 2002-01-31T00:00:00


Link: CVE-2001-1013

JSON object: View

cve-icon NVD Information

Status : Modified

Published: 2001-09-12T04:00:00.000

Modified: 2017-12-19T02:29:30.690


Link: CVE-2001-1013

JSON object: View

cve-icon Redhat Information

No data.