PT-1999-1587 · Netscape · Netscape Enterprise Server

Publicado 1999-07-30 · Atualizado 2016-10-18 · CVE-1999-1130

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Netscape Enterprise Server version 3.5.1

Description The default configuration of the search engine in the affected software allows remote attackers to read the source of JHTML files by specifying a search command using the HTML-tocrec-demo1.pat pattern file.

Recommendations For Netscape Enterprise Server version 3.5.1, consider changing the default configuration of the search engine to prevent remote attackers from reading the source of JHTML files. As a temporary workaround, restrict access to the search functionality until a more permanent solution is implemented.

Exploit

Correção

Identificadores relacionados

CVE-1999-1130

Produtos afetados

Netscape Enterprise Server

Referências · 6

• 🔥 https://exploit-db.com/exploits/19443 · Exploit
• http://marc.info/?l=bugtraq&m=93346448121208&w=2 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-1130 · Nota
• http://securityfocus.com/bid/559 · Nota
• http://marc.info/?l=ntbugtraq&m=93337389603117&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-1130 · Nota de Segurança