CVE-2001-1013

This exploit leverages a misconfiguration in Apache on Red Hat Linux 7.0 to enumerate valid usernames by analyzing HTTP responses to requests for user home directories. It checks for the presence of 'permission' in the response to confirm user existence.

This Metasploit auxiliary module enumerates valid usernames on an Apache server by exploiting the difference in HTTP response codes when querying non-existent users versus existing users without a public_html directory. It iterates through a user list and checks for 403 or 200 responses to identify valid users.