CVE:CVE-2001-1449
CNNVD:CNNVD-200111-048
Mandrake Linux 7.1至8.0版本和Corporate服务器 1.0.1版本的Apache 1.3.19之前版本存在默认安装漏洞。远程攻击者可以利用该漏洞列出任意web目录的目录索引。
solution:Upgrade apache http_server to a higher version than 1.3,1.3.1,1.3.3,1.3.4,1.3.6,1.3.9,1.3.11,1.3.12,1.3.14,1.3.17,1.3.18,and avoid the version 1.3,1.3.1,1.3.3,1.3.4,1.3.6,1.3.9,1.3.11,1.3.12,1.3.14,1.3.17,1.3.18; Upgrade mandrakesoft mandrake_single_network_firewall to a higher version than 7.2,and avoid the version 7.2; Upgrade mandrakesoft mandrake_linux to a higher version than 7.1,7.3,8.0,and avoid the version 7.1,7.3,8.0; Upgrade mandrakesoft mandrake_linux_corporate_server to a higher version than 1.0.1,and avoid the version 1.0.1