Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.0

Docview on Caldera/OpenServer lets attackers read files

CVE-2003-0658 · published 23 years ago
Summary

The Docview component in Caldera OpenLinux 3.1.1, SCO Linux 4.0 and OpenServer 5.0.7 configures the Apache web server so that an outsider can request a special URL and view any file that the web server can read. This could expose configuration data, source code, or other sensitive information. Upgrade Docview to version 1.1-18 or later to correct the web‑server settings.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
caldera openlinux_server 3.1.1
cpe:2.3:a:caldera:openlinux_server:3.1.1:*:*:*:*:*:*:*
caldera openlinux_workstation 3.1.1
cpe:2.3:a:caldera:openlinux_workstation:3.1.1:*:*:*:*:*:*:*
caldera openserver 5.0.7
cpe:2.3:a:caldera:openserver:5.0.7:*:*:*:*:*:*:*
sco unixware 7.1.3
cpe:2.3:o:sco:unixware:7.1.3:*:*:*:*:*:*:*
Original advisory text
Docview before 1.1-18 in Caldera OpenLinux 3.1.1, SCO Linux 4.0, OpenServer 5.0.7, configures the Apache web server in a way that allows remote attackers to read arbitrary publicly readable files v...
Docview before 1.1-18 in Caldera OpenLinux 3.1.1, SCO Linux 4.0, OpenServer 5.0.7, configures the Apache web server in a way that allows remote attackers to read arbitrary publicly readable files via a certain URL, possibly related to rewrite rules.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.0 Medium
Exploitation
2% chance of attack within 30 days
Timeline
Published20 Oct 2003
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2003-0658 · NVD
Track software like this
Free during beta