Lucene search

[email protected]CVE-2001-0250

HistoryJun 02, 2001 - 4:00 a.m.

CVE-2001-0250

2001-06-0204:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

netscape

enterprise server

web publishing

remote attack

directory listing

cve-2001-0250

nvd

7.1 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.012 Low

EPSS

Percentile

84.7%

JSON

The Web Publishing feature in Netscape Enterprise Server 4.x and earlier allows remote attackers to list arbitrary directories under the web server root via the INDEX command.

CPENameOperatorVersion
netscape:enterprise_servernetscape enterprise servereq4.0
netscape:enterprise_servernetscape enterprise servereq3.0

CPE	Name	Operator	Version
netscape:enterprise_server	netscape enterprise server	eq	4.0
netscape:enterprise_server	netscape enterprise server	eq	3.0

References

archives.neohapsis.com/archives/bugtraq/2001-01/0396.html

www.securityfocus.com/bid/2285

exchange.xforce.ibmcloud.com/vulnerabilities/5997

7.1 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.012 Low

EPSS

Percentile

84.7%

JSON

Related for CVE-2001-0250

nessus1