First published: Thu Jan 01 1998(Updated: )
Netscape FastTrack Web server lists files when a lowercase "get" command is used instead of an uppercase GET.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Netscape FastTrack Server | =3.01 | |
=3.01 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-1999-0239 is typically considered low, as it primarily involves improper case handling in HTTP requests.
To fix CVE-1999-0239, ensure that the Netscape FastTrack Server is updated to a version that handles case sensitivity properly.
CVE-1999-0239 affects the Netscape FastTrack Server version 3.01.
CVE-1999-0239 is classified as a server misconfiguration vulnerability due to improper handling of HTTP command case.
Yes, CVE-1999-0239 can potentially lead to data exposure by allowing unauthorized file listings through the web server.