WEB_MISC Netscape Enterprise Server directory view

 

Code: p1336

Severity: Warning

 

Description: This event is generated when an attempt is made to exploit a vulnerability in some versions of Netscape Enterprise Server.

Impact: Information leak which could provide an attacker with the data needed to launch further attacks or gain more detailed information about your web server.

Corrective: Disable directory indexing. For earlier versions of Netscape Enterprise Server, this may not fix the problem. On iPlanet, you can also change the indexing type to "fancy". To fix the potential DOS vulnerability, upgrade to at least iWS 4.1 SP8.