CVE-2002-1677

The CVE-2002-1677 issue affects 14all.cgi 1.1p15 in mrtgconfig. A crafted request with an invalid cfg parameter causes an error message that reveals the web root's physical path, enabling remote attackers to discover server directory structure. Impact is partial confidentiality exposure (path dis...

CVE-2002-1677: Undefined Security Weakness

14all.cgi 1.1p15 in mrtgconfig allows remote attackers to determine the physical path to the web root directory via a request with an invalid cfg parameter, which generates an error message that reveals the path...

CVE-2002-0232: Undefined Security Weakness

Directory traversal vulnerability in Multi Router Traffic Grapher MRTG allows remote attackers to read portions of arbitrary files via a .. dot dot in the cfg parameter for 1 14all.cgi, 2 14all-1.1.cgi, 3 traffic.cgi, or 4 mrtg.cgi...