Netscape Enterprise Server INDEX Directory Listing Vulnerability

Netscape Enterprise Server is industrial-strength Web server software that enables organizations to publish content and deploy network-centric applications.

By requesting a specially crafted command via a telnet port, a malicious user can cause the Netscape Enterprise Server to display it's directory structure.

Note: In order to exploit this vulnerability, Web Publishing must be enabled.

Successful exploitation of this vulnerability may result in the disclosure of the directory listing of the server.

The Security Research Team (security@relaygroup.com) provided the following workaround:
Disable Web Publishing or disable INDEX request, which will likely break the Web publishing feature.