CVE-2001-1013
Red Hat Linux - Username Enumeration via Apache UserDir Error Code Discrepancy
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2001-1013.
PoCs published by Gabriel A Maggiotti, including Metasploit module auxiliary/scanner/http/apache_userdir_enum.
AI-analyzed exploit summary This exploit leverages a misconfiguration in Apache on Red Hat Linux 7.0 to enumerate valid usernames by analyzing HTTP responses to requests for user home directories. It checks for the presence of 'permission' in the response to confirm user existence.
Description
Apache on Red Hat Linux with with the UserDir directive enabled generates different error codes when a username exists and there is no public_html directory and when the username does not exist, which could allow remote attackers to determine valid usernames on the server.
Exploits (2)
This exploit leverages a misconfiguration in Apache on Red Hat Linux 7.0 to enumerate valid usernames by analyzing HTTP responses to requests for user home directories. It checks for the presence of 'permission' in the response to confirm user existence.
This Metasploit auxiliary module enumerates valid usernames on an Apache server by exploiting the difference in HTTP response codes when querying non-existent users versus existing users without a public_html directory. It iterates through a user list and checks for 403 or 200 responses to identify valid users.