CVE

Id
5044  
CVE No.
CVE-2002-0654  
Status
Candidate  
Description
Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to determine the full pathname of the server via (1) a request for a .var file, which leaks the pathname in the resulting error message, or (2) via an error message that occurs when a script (child process) cannot be invoked.  
Phase
Modified (20071101)  
Votes
ACCEPT(4) Armstrong, Baker, Cox, Foat | MODIFY(1) Frech | NOOP(1) Cole | REVIEWING(1) Wall  
Comments
Frech> XF:apache-cgi-path-disclosure(9876) | XF:apache-var-path-disclosure(9875) | In description, correct product names to OS/2 and NetWare.  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
26296 5044 CVE-2002-0654 BUGTRAQ:20020816 Apache 2.0.39 directory traversal and path disclosure bug  View
26297 5044 CVE-2002-0654 URL:http://marc.info/?l=bugtraq&m=102951160411052&w=2  View
26298 5044 CVE-2002-0654 CONFIRM:http://www.apache.org/dist/httpd/CHANGES_2.0  View
26299 5044 CVE-2002-0654 BID:5486  View
26300 5044 CVE-2002-0654 URL:http://www.securityfocus.com/bid/5486  View
26301 5044 CVE-2002-0654 BID:5485  View
26302 5044 CVE-2002-0654 URL:http://www.securityfocus.com/bid/5485  View
26303 5044 CVE-2002-0654 XF:apache-var-path-disclosure(9875)  View
26304 5044 CVE-2002-0654 URL:http://www.iss.net/security_center/static/9875.php  View
26305 5044 CVE-2002-0654 XF:apache-cgi-path-disclosure(9876)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63863 JVNDB-2002-000190 Apache HTTP Server におけるファイルやスクリプトの絶対パス漏洩の脆弱性 Apache HTTP Server には、MIME ファイルの取り扱いの不備のため、ファイルの絶対パスをエラーメッセージに表示してしまう脆弱性が存在します。 CVE-2002-0654 5044 5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000190.html  View