Netscape Enterprise Web Server for Netware Information Disclosure Vulnerability
BID:4874
Info
Netscape Enterprise Web Server for Netware Information Disclosure Vulnerability
| Bugtraq ID: | 4874 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 29 2002 12:00AM |
| Updated: | May 29 2002 12:00AM |
| Credit: | Discovered by ProCheckUp. |
| Vulnerable: |
Netscape Enterprise Server for NetWare 4/5 5.0 |
| Not Vulnerable: | |
Discussion
Netscape Enterprise Web Server for Netware Information Disclosure Vulnerability
It has been reported that Netscape Enterprise Web Server may disclose path and system information to a remote user.
Netscape Enterprise Web Server for Netware contain several sample files which leak system information, this information can be obtained by remote users.
An attacker is able to send a request, for an affected sample file, that will cause the host to disclose the location of the web root path. Certain sample files will also reveal detailed system specific information.
It has been reported that Netscape Enterprise Web Server may disclose path and system information to a remote user.
Netscape Enterprise Web Server for Netware contain several sample files which leak system information, this information can be obtained by remote users.
An attacker is able to send a request, for an affected sample file, that will cause the host to disclose the location of the web root path. Certain sample files will also reveal detailed system specific information.
Solution / Fix
Netscape Enterprise Web Server for Netware Information Disclosure Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.