This script is Copyright (C) 2004-2014 Tenable Network Security, Inc.
The remote Gentoo host is missing one or more security-related
The remote host is affected by the vulnerability described in GLSA-200409-33
(Apache: Exposure of protected directories)
A bug in the way Apache handles the Satisfy directive, which is used to
require that certain conditions (client host, client authentication, etc)
be met before access to a certain directory is granted, could allow the
exposure of protected directories to unauthorized clients.
Directories containing protected data could be exposed to all visitors to
There is no known workaround at this time.
See also :
All Apache users should upgrade to the latest version:
# emerge sync
# emerge -pv '>=www-servers/apache-2.0.51-r1'
# emerge '>=www-servers/apache-2.0.51-r1'
Risk factor :
High / CVSS Base Score : 7.5
Family: Gentoo Local Security Checks
Nessus Plugin ID: 14811 (gentoo_GLSA-200409-33.nasl)
CVE ID: CVE-2004-0811