Directory Indexing

WHID 2005-3: Misconfiguration issues in paid wireless access and billing applications

Multiple misconfiguration problems such as browsable directories, physical path revealing and default or weak passwords

Additional information:

Think Discovers Critical Flaws in U.S. Transportation Security [Vulnerabiliy Publisher's Site, Feb 1 2005]

Attack Method:

Directory Indexing

Insufficient Authentication

Incident Outcome:

Leakage of Information