Lucene search
HistoryAug 18, 2003 - 4:00 a.m.
CVE-2003-0456
cve-2003-0456
visnetic website
remote attackers
pathname leakage
security vulnerability
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.5 Medium
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
77.7%
VisNetic WebSite 3.5 allows remote attackers to obtain the full pathname of the server via a request containing a folder that does not exist, which leaks the pathname in an error message, as demonstrated using _vti_bin/fpcount.exe.
Affected configurations
Node
deerfieldvisnetic_websiteMatch3.5.13
ORdeerfieldvisnetic_websiteMatch3.5.15
ORdeerfieldvisnetic_websiteMatch3.5.17
Related
nvd
nvd
CVE-2003-0456
2003-08-18 04:00:00
cvelist
cvelist
CVE-2003-0456
2003-07-15 04:00:00
openvas
openvas
Non-Existent Page Physical Path Disclosure Vulnerability
2005-11-03 00:00:00
Non-Existant Page Physical Path Disclosure Vulnerability
2005-11-03 00:00:00
nessus
nessus
Nonexistent Page (404) Physical Path Disclosure
2003-06-11 00:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.5 Medium
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
77.7%
Related for CVE-2003-0456