SuSE Apache WebDAV Directory Listings Vulnerability  WebDAV (Web
Distributed Authoring and Versioning) is an extension of HTTP
which allows users to create, edit and share documents using the
HTTP protocol. A particular REQUEST METHOD, PROPFIND, allows
users to retrieve resource properties such as displayname, date
last modified, and others. Apache web server as installed by
SuSE 6.4 has WebDAV enabled for the entire file structure of the
server. By making a specific, properly structured request to the
Apache web server, it is possible to obtain information which is
equivalent to a directory listing.   Privacy Statement Copyright
2010, SecurityFocus