CVE

Id
10944  
CVE No.
CVE-2004-2518  
Status
Candidate  
Description
Gattaca Server 2003 1.1.10.0 allows remote attackers to obtain sensitive information via (1) a trailing null byte ("%00") to a URL or (2) an invalid LANGUAGE parameter to web.tmpl, which reveals the full installation path in an error message.  
Phase
Assigned (20051025)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
76640 10944 CVE-2004-2518 MISC:http://members.lycos.co.uk/r34ct/main/Gattaca%20Server%202003.txt  View
76641 10944 CVE-2004-2518 CONFIRM:http://www.gattaca-server.com/cgi-bin/yabb/YaBB.pl?board=gattaca_discussion;action=display;num=1091194176;start=0#0  View
76642 10944 CVE-2004-2518 BID:10729  View
76643 10944 CVE-2004-2518 URL:http://www.securityfocus.com/bid/10729  View
76644 10944 CVE-2004-2518 OSVDB:7922  View
76645 10944 CVE-2004-2518 URL:http://www.osvdb.org/7922  View
76646 10944 CVE-2004-2518 OSVDB:7923  View
76647 10944 CVE-2004-2518 URL:http://www.osvdb.org/7923  View
76648 10944 CVE-2004-2518 SECTRACK:1010703  View
76649 10944 CVE-2004-2518 URL:http://securitytracker.com/id?1010703  View
76650 10944 CVE-2004-2518 SECUNIA:12071  View
76651 10944 CVE-2004-2518 URL:http://secunia.com/advisories/12071  View
76652 10944 CVE-2004-2518 XF:gattaca-null-path-disclosure(16699)  View
76653 10944 CVE-2004-2518 URL:http://xforce.iss.net/xforce/xfdb/16699  View
76654 10944 CVE-2004-2518 XF:gattaca-language-path-disclosure(16700)  View

Related JVN