[14411] in bugtraq
[zsh] Advisory : Netscape WebPublisher Allows Directory Listing
daemon@ATHENA.MIT.EDU (f0bic)
Fri Mar 24 16:43:44 2000
Content-Type: Multipart/Mixed;
boundary="Boundary-=_nWlrBbmQBhCDarzOwKkYHIDdqSCD"
Mime-Version: 1.0
Message-Id: <00032322073800.02176@ninja>
Date: Thu, 23 Mar 2000 22:04:53 -0800
Reply-To: f0bic <f0bic@DEADPROTOCOL.ORG>
From: f0bic <f0bic@DEADPROTOCOL.ORG>
X-To: bugtraq@securityfocus.com
To: BUGTRAQ@SECURITYFOCUS.COM
--Boundary-=_nWlrBbmQBhCDarzOwKkYHIDdqSCD
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
Netscape WebPublisher Allows Directory Listing and Access
Attachement added
--Boundary-=_nWlrBbmQBhCDarzOwKkYHIDdqSCD
Content-Type: text/english;
name="netscape-wp.dir-list"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="netscape-wp.dir-list"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=
--Boundary-=_nWlrBbmQBhCDarzOwKkYHIDdqSCD--
