CVE Catalog

CVE-2000-0236

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
5.92%

92th percentile - higher than 92% of all known CVEs

Summary

Netscape Enterprise Server with Directory Indexing enabled allows remote attackers to list server directories via web publishing tags such as ?wp-ver-info and ?wp-cs-dump.

Risk Assessment

Attackers can gain access to the server's directory structure, potentially exposing sensitive information and increasing the risk of further attacks.

Recommendation

It is recommended to disable directory indexing and restrict access to web publishing tags to minimize risk.

Original NVD description (English source)

Netscape Enterprise Server with Directory Indexing enabled allows remote attackers to list server directories via web publishing tags such as ?wp-ver-info and ?wp-cs-dump.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS