CVE-2001-1449: Apache HTTP Server

High severity, CVSS 7.5. EPSS: 7.8% chance of exploitation in the next 30 days.

The default installation of Apache before 1.3.19 on Mandrake Linux 7.1 through 8.0 and Linux Corporate Server 1.0.1 allows remote attackers to list the directory index of arbitrary web directories.

Affected products

• Apache HTTP Server: version 1.3 only; version 1.3.1 only; version 1.3.3 only; version 1.3.4 only; version 1.3.6 only; version 1.3.9 only; …
• Mandrakesoft Mandrake Linux: version 7.1 only; version 7.3 only; version 8.0 only
• Mandrakesoft Mandrake Linux Corporate Server: version 1.0.1 only
• Mandrakesoft Mandrake Single Network Firewall: version 7.2 only

Published 2001-11-28. Last modified 2026-06-16.