CVE-2002-0596

2002-06-1104:00:00

mitre

www.cve.org

6.6 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.3%

JSON

WebTrends Reporting Center 4.0d allows remote attackers to determine the real path of the web server via a GET request to get_od_toc.pl with an empty Profile parameter, which leaks the pathname in an error message.

References

archives.neohapsis.com/archives/bugtraq/2002-04/0207.html

www.iss.net/security_center/static/8865.php

www.ngssoftware.com/advisories/wtr.txt

www.osvdb.org/10447