CVE-2000-0237 Netscape Enterprise Server with Web Publishing enabled allows remote attackers to list arbitrary directories via a GET request for the /publisher directory, which provides a Java applet that allows th...
MediumCVSS 6.4
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Netscape Enterprise Server with Web Publishing enabled allows remote attackers to list arbitrary directories via a GET request for the /publisher directory, which provides a Java applet that allows the attacker to browse the directories.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netscape enterprise server | = 3.5 | No fix listed |
| netscape enterprise server | = 3.6 | No fix listed |
References
- 1075 exploit patch vdb-entry vendor-advisory
- zsh.stupidphat.com