Executive Summary

The default Apache configuration on SuSE 6.4 exposes the /usr/doc directory through an alias for /doc/packages, allowing remote attackers to retrieve package documentation and infer system configuration details via HTTP requests. This information‑disclosure flaw is not currently listed in the CISA KEV database.

---

Authoritative CVE Metadata - CVSS Base Score: 5.0 (MEDIUM) - Published: 2000-12-11T05:00:00.000 - Last Modified: 2026-09-23T14:10:00.190

Original Description: The default configuration of Apache (httpd.conf) on SuSE 6.4 includes an alias for the /usr/doc directory, which allows remote attackers to read package documentation and obtain system configuration information via an HTTP request for the /doc/packages URL.

"An optimist is a person who sees a green light everywhere, while the pessimist sees only the red spotlight... The truly wise person is colour-blind."

— Albert Schweitzer