AN HTTP 1.41e allows remote attackers to obtain the root web server path via an HTTP request with a long argument to a script, which leaks the path in an error message.
Link | Tags |
---|---|
http://www.securityfocus.com/archive/1/305234 | mailing list vendor advisory |
http://www.securityfocus.com/bid/6528 | vdb entry |
http://www.iss.net/security_center/static/10976.php | vdb entry |