CVE-2000-0236

Description

Netscape Enterprise Server with Directory Indexing enabled allows remote attackers to list server directories via web publishing tags such as ?wp-ver-info and ?wp-cs-dump.

Affected products

• netscape / enterprise_server3.0 – 3.0
• netscape / enterprise_server3.5.1 – 3.5.1
• netscape / enterprise_server3.6 – 3.6

Exploits & proofs of concept

• exploit-dbNetscape Enterprise Server 3.0/3.6/3.51 - Directory Indexingby Gabriel Maggiotti

References

• MISChttp://www.securityfocus.com/bid/1063
• MISChttp://www.securityfocus.com/templates/archive.pike?list=1&msg=38D2173D.24E39DD0%40relaygroup.com