Debian 2.1 - HTTPd

Author: anonymous
type: remote
platform: linux
port: 
date_added: 1999-06-17  
date_updated: 2012-06-17  
verified: 1  
codes: CVE-1999-0678;OSVDB-48  
tags:   
aliases:   
screenshot_url:   
application_url:   

raw file: 19253.txt  

source: https://www.securityfocus.com/bid/318/info


The Debian GNU/Linux 2.1 apache package by default allows anyone to view /usr/doc via the web, remotely. This is because srm.conf is preconfigured with the line:

Alias /doc/ /usr/doc/

Boa is also preconfigured this way.


lynx http://some.host/doc

This will provide you with all of the information in /usr/doc, which could be used to find vulnerable software on the remote machine.