EUVD-2004-0050

Malware in sbrugna...

CVE-2004-0050

Verity Ultraseek before 5.2.2 allows remote attackers to obtain the full pathname of the document root via an MS-DOS device name in the web search option, such as 1 NUL, 2 CON, 3 AUX, 4 COM1, 5 COM2, and others...

Yet Another IBM WebSphere Showcode Vulerability

Summary: When IBM WebSphere application server shares the same document root as Netscape Enterprise server it is possible for a malicious user to view to view the source of any JSP file in the document root. WebSphere's plugin for Netscape Enterprise server uses the host header sent from the clie...