Netscape Enterprise Server Directory Indexing Vulnerability

Solution:
The Directory Indexing feature can be turned off via the Administration Interface. Selecting Content Management -> Document Preferences and changing Directory Indexing to "none" will disable this feature.

Also, manually editing the file obj.conf will do the same. Conduct a search for the following:

Service method="(GET|HEAD)" type="magnus-internal/directory"
fn="index-common"

and replace fn="index-common" with fn="send-error".



 

Privacy Statement
Copyright 2010, SecurityFocus