Even after you fix the server (returning 403 or 404 errors), Google has cached the "Index of" page. You must request removal:
: This limits the results to directories that specifically include the word "private" in the folder name or file list. Risks and Security Context intitle index of private