5
CVSSv2

CVE-2001-0250

Published: 02/06/2001 Updated: 19/12/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 505
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

The Web Publishing feature in Netscape Enterprise Server 4.x and previous versions allows remote malicious users to list arbitrary directories under the web server root via the INDEX command.

Vulnerable Product Search on Vulmon Subscribe to Product

netscape enterprise server 3.0

netscape enterprise server 4.0

Exploits

source: wwwsecurityfocuscom/bid/2285/info Netscape Enterprise Server with Web Publishing enabled will disclose the directory listing of the server to unauthenticated users who submit an INDEX request INDEX / HTTP/10 ...