published February 2, 2002
NVD has not assigned a CVSS score to this record. It sits in the 99.3th percentile for exploit probability.
Apache on Red Hat Linux with with the UserDir directive enabled generates different error codes when a username exists and there is no public_html directory and when the username does not exist, which could allow remote attackers to determine valid usernames on the server.