Vulnerability Database

308,485

Total vulnerabilities in the database

CVE-2003-1138

The default configuration of Apache 2.0.40, as shipped with Red Hat Linux 9.0, allows remote attackers to list directory contents, even if auto indexing is turned off and there is a default web page configured, via a GET request containing a double slash (//).

  • Published: Oct 27, 2003
  • Updated: Nov 9, 2025
  • CVE: CVE-2003-1138
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:P/I:N/A:N

No CWE or OWASP classifications available.

Software From Fixed in
redhat / interchange 2.0.40_21.5 2.0.40_21.5.x