Vulnerability Details CVE-2000-1016
The default configuration of Apache (httpd.conf) on SuSE 6.4 includes an alias for the /usr/doc directory, which allows remote attackers to read package documentation and obtain system configuration information via an HTTP request for the /doc/packages URL.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.043
EPSS Ranking 88.3%
CVSS Severity
CVSS v2 Score 5.0
References
Products affected by CVE-2000-1016
-
cpe:2.3:o:suse:suse_linux:6.3
-
cpe:2.3:o:suse:suse_linux:6.4