Jakarta Tomcat 3.x/4.0 - Error Message Information Disclosure

source: https://www.securityfocus.com/bid/3199/info When a malformed request is made for a Java Server Page the server displays an error page. The error page contains potentially sensitive information, along with the absolute path of the JSP file on the webserver, which may aid in further attacks...

Дырки в BestCrypt (non-absolute path, buffer overflow)

При вызове внешнего приложения с повышенными привилегиями используется не абсолютный путь, Кроме того имеются переполнения буфера...

CVE-2001-0224

CVE-2001-0224 affects the Muscat Empower CGI program. A remote attacker can cause disclosure of the server’s absolute pathname via an invalid request in the DB parameter. The issue is demonstrated by a misleading DB parameter in a GET request to the CGI (e.g., GET /cgi-bin/empower?DB=whatever), w...

CVE-2000-1240

Unspecified vulnerability in siteman.php3 in AnyPortalphp before 22 APR 00 allows remote attackers to obtain sensitive information via unknown attack vectors, which reveal the absolute path. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

Дырка в htgrep

Используя абсолютный путь можно получить доступ к любому файлу...

CVE-1999-0882

The Falcon web server is affected by CVE-1999-0882: remote attackers can determine the absolute path of the web root by exploiting long file names, revealing an information disclosure issue in path handling. Affected product: Falcon web server (exact versions not specified in the provided documen...

IBM Lotus Domino HTTP Server Filesystem Setup Disclosure

It is possible to get the absolute path leading to the remote /cgi-bin directory by requesting a bogus cgi. This issue can be used to obtain OS and installation details. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

PT-1999-1430 · Falcon · Falcon Web Server

Name of the Vulnerable Software and Affected Versions: Falcon web server affected versions not specified Description: The issue allows remote attackers to determine the absolute path of the web root via long file names. Recommendations: At the moment, there is no information about a newer version...