Description
The default configuration of Apache 1.3.12 in SuSE Linux 6.4 allows remote attackers to read source code for CGI scripts by replacing the /cgi-bin/ in the requested URL with /cgi-bin-sdb/.
References
- 20000907 vendor-advisory
- 1658 vdb-entry
- A090700-2 vendor-advisory
- suse-apache-cgi-source-code(5197) vdb-entry