Back to search
CVE-2004-0050
Published: May 6, 2004
Modified: Aug 8, 2024
PUBLISHED
Description
Verity Ultraseek before 5.2.2 allows remote attackers to obtain the full pathname of the document root via an MS-DOS device name in the web search option, such as (1) NUL, (2) CON, (3) AUX, (4) COM1, (5) COM2, and others.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
ultraseek-error-path-disclosure(16066)
vdb-entry
x_refsource_XF
20040505 Corsaire Security Advisory - Verity Ultraseek path disclosure issue
mailing-list
x_refsource_VULNWATCH
20040505 Corsaire Security Advisory - Verity Ultraseek path disclosure issue
mailing-list
x_refsource_BUGTRAQ
20040505 Corsaire Security Advisory - Verity Ultraseek path disclosure issue
mailing-list
x_refsource_FULLDISC
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now