CVE-2000-0237
MediumExploitation Probability (EPSS)
High risk80th percentile - higher than 80% of all known CVEs
Summary
Netscape Enterprise Server with Web Publishing enabled allows remote attackers to browse arbitrary directories via a GET request for the /publisher directory, which provides a Java applet for directory browsing.
Risk Assessment
Attackers may gain access to sensitive information stored in directories, potentially leading to further attacks on the system.
Recommendation
It is recommended to disable web publishing features or implement appropriate security measures to restrict access to the /publisher directory.
Original NVD description (English source)
Netscape Enterprise Server with Web Publishing enabled allows remote attackers to list arbitrary directories via a GET request for the /publisher directory, which provides a Java applet that allows the attacker to browse the directories.