Lucene search
HistorySep 12, 2001 - 4:00 a.m.
CVE-2000-1191
htdig
htsearch
cve-2000-1191
nvd
remote attack
server path
configuration file
6.4 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.002 Low
EPSS
Percentile
56.1%
htsearch program in htDig 3.2 beta, 3.1.6, 3.1.5, and earlier allows remote attackers to determine the physical path of the server by requesting a non-existent configuration file using the config parameter, which generates an error message that includes the full path.
Affected configurations
Node
htdig_projecthtdigRange≤3.1.6
ORhtdig_projecthtdigMatch3.2.0beta1
| CPE | Name | Operator | Version |
|---|---|---|---|
| htdig_project:htdig | htdig project htdig | le | 3.1.6 |
| htdig_project:htdig | htdig project htdig | eq | 3.2.0 |
Related
cvelist
cvelist
CVE-2000-1191
2001-09-12 04:00:00
nvd
nvd
CVE-2000-1191
2001-08-31 04:00:00
openvas
openvas
ht://Dig's htsearch reveals web server path
2005-11-03 00:00:00
6.4 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.002 Low
EPSS
Percentile
56.1%
Related for CVE-2000-1191