CVE-2000-0237

Severity: medium (CVSS 6.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2000-03-11 · updated 2026-06-16

Description

Netscape Enterprise Server with Web Publishing enabled allows remote attackers to list arbitrary directories via a GET request for the /publisher directory, which provides a Java applet that allows the attacker to browse the directories.

Affected products

Netscape Enterprise Server: 3.5, 3.6

References

http://www.securityfocus.com/bid/1075
http://zsh.stupidphat.com/advisory.cgi?000311-1
http://www.securityfocus.com/bid/1075
http://zsh.stupidphat.com/advisory.cgi?000311-1

Get alerted when CVE-2000-0237 or the next vulnerability affects your stack