Total vulnerabilities in the database
The default installation of Apache before 1.3.19 allows remote attackers to list directories instead of the multiview index.html file via an HTTP request for a path that contains many / (slash) characters, which causes the path to be mishandled by (1) mod_negotiation, (2) mod_dir, or (3) mod_autoindex.
| Software | From | Fixed in |
|---|---|---|
| apache / http_server | 1.3.12 | 1.3.12.x |
| apache / http_server | 1.3.17 | 1.3.17.x |
| apache / http_server | 1.3.14 | 1.3.14.x |
| apache / http_server | 1.3.11 | 1.3.11.x |
| debian / debian_linux | 2.2 | 2.2.x |