CVE Catalog

CVE-1999-0239

HighCVSS 7.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
7.65%

94th percentile - higher than 94% of all known CVEs

Summary

Netscape FastTrack Web server lists files when a lowercase 'get' command is used instead of an uppercase 'GET'.

Risk Assessment

The disclosure of file listings may lead to information leakage about the server's structure and available resources, increasing the risk of attacks.

Recommendation

It is recommended to configure the server to ignore case differences in HTTP commands or to restrict access to unauthorized resources.

Original NVD description (English source)

Netscape FastTrack Web server lists files when a lowercase "get" command is used instead of an uppercase GET.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS