CVE-2004-2106

CVE-2004-2106 describes a directory listing vulnerability in Novell NetWare Enterprise Web Server versions 5.1 and 6.0. Remote attackers can exploit this by directly requesting specific directories like /com/novell/webaccess, potentially exposing sensitive information. The vulnerability has a CVSS score of 5.0, indicating a medium severity with a network attack vector, low attack complexity, and no authentication required, leading to potential information disclosure. While there is no evidence of active exploitation or public exploit code in Metasploit or ExploitDB, the vulnerability has garnered significant community discussion, with 10 mentions, suggesting awareness among security researchers.