CVE-2000-0236
MediumExploitation Probability (EPSS)
Very high risk92th percentile - higher than 92% of all known CVEs
Summary
Netscape Enterprise Server with Directory Indexing enabled allows remote attackers to list server directories via web publishing tags such as ?wp-ver-info and ?wp-cs-dump.
Risk Assessment
Attackers can gain access to the server's directory structure, potentially exposing sensitive information and increasing the risk of further attacks.
Recommendation
It is recommended to disable directory indexing and restrict access to web publishing tags to minimize risk.
Other vulnerabilities in Netscape Enterprise Server
See all- CVE-1999-0751Medium
Buffer overflow in the Accept command in Netscape Enterprise Server 3.6 with the SSL Handshake Patch may lead to unauthorized access.
- CVE-1999-0752Medium
CVE-1999-0752 affects the Netscape Enterprise Server, where a buffer overflow during the SSL handshake can lead to a denial of service.
- CVE-2000-0237Medium
Netscape Enterprise Server with Web Publishing enabled allows remote attackers to browse arbitrary directories via a GET request for the /publisher directory, which provides a Java applet for directory browsing.
Original NVD description (English source)
Netscape Enterprise Server with Directory Indexing enabled allows remote attackers to list server directories via web publishing tags such as ?wp-ver-info and ?wp-cs-dump.