CVE-2001-1013

CVE-2001-1013 describes a username enumeration vulnerability in Apache on Red Hat Linux when the UserDir directive is enabled. Attackers can differentiate between existing and non-existing usernames based on distinct error codes, allowing them to identify valid user accounts. This medium-severity vulnerability has a CVSS score of 5.0, indicating it can be exploited remotely with low attack complexity to achieve partial confidentiality impact by disclosing usernames. While not actively exploited in the wild (no KEV entry), exploit modules are available in Metasploit and ExploitDB, demonstrating its exploitability. Despite its age, its high FAUCET Risk Score and EPSS percentile suggest it remains a relevant concern for systems that have not been patched.