The default configuration of Apache 1.3.12 in SuSE Linux 6.4 allows remote attackers to read source code for CGI scripts by replacing the /cgi-bin/ in the requested URL with /cgi-bin-sdb/.
| Software | From | Fixed in |
|---|---|---|
| apache / http_server | 1.3.12 | 1.3.12.x |
| suse / suse_linux | 6.3 | 6.3.x |
| suse / suse_linux | 6.4 | 6.4.x |