The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbitrary directories via the PROPFIND HTTP request method.
https://exchange.xforce.ibmcloud.com/vulnerabilities/5204
https://euvd.enisa.europa.eu/vulnerability/EUVD-2000-0856
http://www.securityfocus.com/bid/1656
http://www.atstake.com/research/advisories/2000/a090700-3.txt
http://archives.neohapsis.com/archives/linux/suse/2000-q3/0906.html