CVE

Id
2758  
CVE No.
CVE-2000-1191  
Status
Candidate  
Description
htsearch program in htDig 3.2 beta, 3.1.6, 3.1.5, and earlier allows remote attackers to determine the physical path of the server by requesting a non-existent configuration file using the config parameter, which generates an error message that includes the full path.  
Phase
Modified (20100819)  
Votes
ACCEPT(1) Stracener | MODIFY(1) Frech | NOOP(4) Cole, Foat, Wall, Williams  
Comments
Frech> XF:htdig-htsearch-path-disclosure(7367) | MISC reference should be | http://www.securiteam.com/exploits/5YQ0C000IU.html.  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
11018 2758 CVE-2000-1191 MISC:http://www.securiteam.com/exploits/htDig_reveals_web_server_configuration_paths.html  View
11019 2758 CVE-2000-1191 BID:4366  View
11020 2758 CVE-2000-1191 URL:http://www.securityfocus.com/bid/4366  View
11021 2758 CVE-2000-1191 OVAL:oval:org.mitre.oval:def:10526  View
11022 2758 CVE-2000-1191 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10526  View
11023 2758 CVE-2000-1191 XF:htdig-htsearch-path-disclosure(7367)  View

Related JVN