HTTP: Netscape Enterprise Server 'Index' Disclosure

This signature detects attempts to obtain a directory listing by using an INDEX HTTP request.

Extended Description

Netscape Enterprise Server with Web Publishing enabled will disclose the directory listing of the server to unauthenticated users who submit an INDEX request.

Affected Products

Netscape enterprise_server

References

BugTraq: 2285

CVE: CVE-2001-0250

Short Name
HTTP:NETSCAPE:INDEX-DISCLOSURE
Severity
Warning
Recommended
False
Recommended Action
None
Category
HTTP
Keywords
'Index' CVE-2001-0250 Disclosure Enterprise Netscape Server bid:2285
Release Date
04/22/2003
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3375
False Positive
Unknown
Vendors

Netscape

CVSS Score

5.0

Found a potential security threat?