EUVD-2001-0224

Malware in sbrugna...

CVE-2001-0224

Muscat Empower CGI program allows remote attackers to obtain the absolute pathname of the server via an invalid request in the DB parameter...

CVE-2001-0224

CVE-2001-0224 affects the Muscat Empower CGI program. A remote attacker can cause disclosure of the server’s absolute pathname via an invalid request in the DB parameter. The issue is demonstrated by a misleading DB parameter in a GET request to the CGI (e.g., GET /cgi-bin/empower?DB=whatever), w...

CVE-2001-0224

Muscat Empower CGI program allows remote attackers to obtain the absolute pathname of the server via an invalid request in the DB parameter...

Vulnerability in Muscat Empower wich can print path to DB-dir.

-----------UkR security team advisory 6------------ Vulnerability in Muscat Empower wich can print path to DB-dir. -------------------------------------------------- Name: Vulnerability in Muscat Empower wich can print path to DB-dir. Date: 03.02.2001 Problem: when the request invalid send to...

Muscat Empower CGI Malformed DB Parameter Path Disclosure

The remote host appears to be running Muscat Empower. It was possible to get the physical location of a virtual web directory by issuing the following command : GET /cgi-bin/empower?DB=whatever HTTP/1.0 A remote attacker could use this information to mount further attacks. %NASLMINLEVEL 70300 C...