CVE-2001-1013
Apache on Red Hat Linux with with the UserDir directive enabled generates different error codes when a username exists and there is no public_html directory and when the username does not exist, which could allow remote attackers to determine valid usernames on the server.
Scoring
- CVSS base score
- 3.41
- EPSS probability
- 68.12%
- Published
- 2002-02-02
- Last modified
- 2026-03-16
Affected products
- n/a n/a