CVE-1999-1130
MediumExploitation Probability (EPSS)
High risk86th percentile - higher than 86% of all known CVEs
Summary
The default configuration of the search engine in Netscape Enterprise Server 3.5.1, and possibly other versions, allows remote attackers to read the source of JHTML files by specifying a search command using the HTML-tocrec-demo1.pat pattern file.
Risk Assessment
Attackers may gain access to sensitive information contained in JHTML files, potentially leading to data exposure or further attacks on the system.
Recommendation
It is recommended to update the server to the latest version and review the search engine configuration to block access to JHTML files.
Original NVD description (English source)
Default configuration of the search engine in Netscape Enterprise Server 3.5.1, and possibly other versions, allows remote attackers to read the source of JHTML files by specifying a search command using the HTML-tocrec-demo1.pat pattern file.