Lucene search
Netscape FastTrack Server 3.0.1 - Fasttrack Root Directory Listing
🗓️ 07 Jun 1999 00:00:00Reported by Jesús López de AguiletaType 
exploitdb🔗 www.exploit-db.com👁 23 Views
Netscape FastTrack Server reveals root directory listing despite an index file presence.
Show more
| Reporter | Title | Published | Views | Family All 4 |
|---|---|---|---|---|
 | Netscape FastTrack get Command Forced Directory Listing | 22 Jun 199900:00 | – | nessus |
 | CVE-1999-0239 | 1 Jan 199805:00 | – | nvd |
 | CVE-1999-0239 | 29 Sep 199904:00 | – | cvelist |
 | CVE-1999-0239 | 29 Sep 199904:00 | – | cve |
source: https://www.securityfocus.com/bid/481/info
Netscape's Fasttrack server is supposed to display a directory listing if the follwing three conditions are met:
1: Directory listing is enabled
2: No filename is specified in the requested URL
3: There is no index file in that directory (defaults are index.html and home.html)
However, even with an index file in the directory, if you telnet to the httpd port and type 'get/' you will get a directory listing of the root directory.
Telnet to the httpd port and type 'get/' to get a root directory listing. Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo07 Jun 1999 00:00Current
7.4High risk
Vulners AI Score7.4