Signature Detail
Short Name |
HTTP:NETSCAPE:INDEX-DISCLOSURE |
|---|---|
Severity |
Low |
Recommended |
No |
Category |
HTTP |
Keywords |
Netscape Enterprise Server 'Index' Disclosure |
Release Date |
2003/04/22 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Netscape Enterprise Server 'Index' Disclosure
This signature detects attempts to obtain a directory listing by using an INDEX HTTP request.
Extended Description
Netscape Enterprise Server with Web Publishing enabled will disclose the directory listing of the server to unauthenticated users who submit an INDEX request.
Affected Products
- Netscape Enterprise Server 3.0.0
- Netscape Enterprise Server 4.0.0
References
- BugTraq: 2285
- CVE: CVE-2001-0250