Netscape Enterprise Server Directory Indexing Vulnerability

The Directory Indexing feature can be turned off via the Administration Interface. Selecting Content Management -> Document Preferences and changing Directory Indexing to "none" will disable this feature.

Also, manually editing the file obj.conf will do the same. Conduct a search for the following:

Service method="(GET|HEAD)" type="magnus-internal/directory"

and replace fn="index-common" with fn="send-error".


Privacy Statement
Copyright 2010, SecurityFocus