CVE-2004-1677

Technical details about CVE-2004-1677 are not provided in the provided documents. The description notes an information disclosure via invalid lang parameter in pdesk.cgi, but no further data on affected versions, root cause, or fixes is provided here. Monitor for updates.

CVE-2004-1677: Undefined Security Weakness

pdesk.cgi in PerlDesk allows remote attackers to gain sensitive information via an invalid lang parameter, which includes pathname information in an error message...

CVE-2004-1678: Undefined Security Weakness

Directory traversal vulnerability in pdesk.cgi in PerlDesk allows remote attackers to read portions of arbitrary files and possibly execute arbitrary Perl modules via ".." sequences terminated by a %00 null character in the lang parameter, which can leak portions of the requested files if a...