Verity Ultraseek before 5.2.2 allows remote attackers to obtain the full pathname of the document root via an MS-DOS device name in the web search option, such as (1) NUL, (2) CON, (3) AUX, (4) COM1, (5) COM2, and others.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2004-05-06T04:00:00

Updated: 2024-08-08T00:01:23.620Z

Reserved: 2004-01-14T00:00:00

Link: CVE-2004-0050

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2004-06-14T04:00:00.000

Modified: 2024-11-20T23:47:38.747

Link: CVE-2004-0050

cve-icon Redhat

No data.