Default configuration of the search engine in Netscape Enterprise Server 3.5.1, and possibly other versions, allows remote attackers to read the source of JHTML files by specifying a search command using the HTML-tocrec-demo1.pat pattern file.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Enterprise_server | Netscape | * | 3.5.1 (including) |