Description
Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to list directories via a direct request to (1) /com/, (2) /com/novell/, (3) /com/novell/webaccess, or (4) /ns-icons/.
References
- netware-enterprise-directory-disclosure(21749) vdb-entry
- 13404 vdb-entry
- 20040123 NetWare-Enterprise-Web-Server/5.1/6.0 Multiple Vulnerabilities mailing-list
- 13403 vdb-entry
- 13402 vdb-entry